Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
16/04/2024, 14:44
General
-
Target
f3b4ed880ce2c7679bf593c7589c3af6_JaffaCakes118.exe
-
Size
82KB
-
MD5
f3b4ed880ce2c7679bf593c7589c3af6
-
SHA1
ab8f5c512009fb894364ff47c2b8cb7acc4a6edc
-
SHA256
d17998d0d925cbaa6caad22b5a1be736d4a0809f56f6ca3ea4d41a6002ee3283
-
SHA512
6d89d1b1a22269f935495c1760df1a02eebca832e2704c11c773b1a16ef1770d8ac9103329885e1f6912a44bd84936e02605fa1e58df9865aae9c48ec00004bb
-
SSDEEP
1536:5WAyEbumSoTUG73BOifaUZYIjDQoFIkFgBCAP/vCT+YZ/TtWu9qdC9+aA:5bimDTUG73BOifvDQoSRBJHCZ/TYu9q3
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3b4ed880ce2c7679bf593c7589c3af6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f3b4ed880ce2c7679bf593c7589c3af6_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f3b4ed880ce2c7679bf593c7589c3af6_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f3b4ed880ce2c7679bf593c7589c3af6_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD52c59b72d5f0680ee7ef155302067ff41
SHA11e36ff787e7ca34271ae2951baf14e136732bd18
SHA2567f588e18db73c292387580bcd6327a623fb02d19c5f7d635b52f3bf94ab8a906
SHA512b04875a1f22bcea1387caf28a717ae24cf8cd7307409cb423b2dd0a49223bf477b1a828433e7a408ad66ce2d990bb592bb617e3d3ec064457a08561d8ebe92ee
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
108KB