Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
17-04-2024 04:43
General
-
Target
f50f7522ef758f3b96f9a5ffdb9b58df_JaffaCakes118.exe
-
Size
56KB
-
MD5
f50f7522ef758f3b96f9a5ffdb9b58df
-
SHA1
c9d10fe9f3c8483a952e7a30c6b03d04d3fc53dc
-
SHA256
b8cbf29ff24f374bd3afc037dc2fee74f8fab906a8533a955311fd29432b9892
-
SHA512
d5a3044d0f77732994c222393edc3f1309987a94f91be71e50fc449c6c915cdf7d913fd1ada03908d93db6c711aafe6037798b4b61c8225cf85d16bc3aaf2afc
-
SSDEEP
768:fouxBTGWCUXfwaFgypJqZFb7houZOJf//YuEqDVOW8tepfQvU8zn58f+W+kcHy7G:wXb0AZFb7aWOZ/P5OWhOcSn5gCkcS7G
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f50f7522ef758f3b96f9a5ffdb9b58df_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f50f7522ef758f3b96f9a5ffdb9b58df_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f50f7522ef758f3b96f9a5ffdb9b58df_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f50f7522ef758f3b96f9a5ffdb9b58df_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD590be9aeb951ea65841a3383b0a3c212b
SHA1046cf213d2658035e000fc0179793aded6d1801d
SHA25698a429b1863788d84ad48c42e8f180cb44c6689e439cb1fefd7fa37443ec35e5
SHA512f6568cd5d227f64ef59a70737ad7747a9226feb59e3bddc969858a083fa4dd79a16a9ccee05c25869ffd14d1f2406ff7279621d5ff0647930f48d3abfffe5c87
-
Filesize
232KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
232KB
-
Filesize
108KB
-
Filesize
232KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
232KB