Overview

overview

7

Static

static

3

f4d4870164...18.exe

windows7-x64

7

f4d4870164...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/04/2024, 02:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    f4d48701646bf5ad075ae7c19e4f3279_JaffaCakes118.exe

  • Size

    82KB

  • MD5

    f4d48701646bf5ad075ae7c19e4f3279

  • SHA1

    c1e31d3b2610423e69402a299528d1b3ed89e514

  • SHA256

    f8bcab4b8b3d777749b19878cafafa2d86b3446e1b79552e7ccdd7fbe7e761fe

  • SHA512

    63a495cb0fcb4d41eaa576c17a059b5e5cca0cdb6123786c2ced47c86dc5e97b3076df2171c90a81a7fb7768e62470a450c7db18ab2f4e7365dfa84225692a89

  • SSDEEP

    1536:O5yIJpcZ0e4e679IxGmwt4Hm5mtUxJ7FK73v8FPTpQ8KXWnbspWQKI:QT0w9P6ZUjG89ddKGnYkQ3

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of UnmapMainImage 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f4d48701646bf5ad075ae7c19e4f3279_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f4d48701646bf5ad075ae7c19e4f3279_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    • Suspicious use of UnmapMainImage
    • Suspicious use of WriteProcessMemory
    PID:2428
    • C:\Users\Admin\AppData\Local\Temp\f4d48701646bf5ad075ae7c19e4f3279_JaffaCakes118.exe
      C:\Users\Admin\AppData\Local\Temp\f4d48701646bf5ad075ae7c19e4f3279_JaffaCakes118.exe
      2⤵
      • Deletes itself
      • Executes dropped EXE
      • Suspicious use of UnmapMainImage
      PID:3164
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3796 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:1232

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\f4d48701646bf5ad075ae7c19e4f3279_JaffaCakes118.exe
            Filesize

            82KB

            MD5

            eeac80eae6cd14fde273b5f7d38b83fc

            SHA1

            0b92e1e1e08d2437bb3f7ea9662b78676bd769fb

            SHA256

            8ad1c72e9f7d436da358b00db5228da987eb8fd8751e9113164be0c04c42968a

            SHA512

            63aad7bc232679694ce82a5144e65d51520ec0ea683f9f459b1ba0997dfee6edda6dcab1e6ff5dfd1d49f9a81a480c0e574200049fe5a8656ed84b413b2bb9db

            Download Submit

          • memory/2428-0-0x0000000000400000-0x000000000042F000-memory.dmp

            Filesize

            188KB

            Download

          • memory/2428-1-0x0000000001430000-0x000000000145F000-memory.dmp

            Filesize

            188KB

            Download

          • memory/2428-2-0x0000000000400000-0x000000000041B000-memory.dmp

            Filesize

            108KB

            Download

          • memory/2428-12-0x0000000000400000-0x000000000041B000-memory.dmp

            Filesize

            108KB

            Download

          • memory/3164-13-0x0000000000400000-0x000000000042F000-memory.dmp

            Filesize

            188KB

            Download

          • memory/3164-18-0x00000000001B0000-0x00000000001DF000-memory.dmp

            Filesize

            188KB

            Download

          • memory/3164-20-0x0000000000400000-0x000000000040E000-memory.dmp

            Filesize

            56KB

            Download

          • memory/3164-22-0x00000000014E0000-0x00000000014FB000-memory.dmp

            Filesize

            108KB

            Download