Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
18/04/2024, 13:44
General
-
Target
f81e38069ac00c7165147ddb83af9eca_JaffaCakes118.exe
-
Size
82KB
-
MD5
f81e38069ac00c7165147ddb83af9eca
-
SHA1
7c5a95095938e3d7153d780043990a1875255328
-
SHA256
399a7b79a993390bb282921704faa43d18093b9c6adea36cc0e685220d78b6c0
-
SHA512
832468885420d44cd6cbe4d89030e190cde9dd9bf1e8de7ba40213231fb5961f263be80acaef88db57f9bf09b37bbcc2df8769794ca043588f5fc36a3e80818b
-
SSDEEP
1536:ip6vnSgAFa7DlBuDFtnGcst7JHIKSds7J8fzgHlN/j8Q02u19enES:iovn5AIFc59DioMJ8fUl1kenJ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f81e38069ac00c7165147ddb83af9eca_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f81e38069ac00c7165147ddb83af9eca_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f81e38069ac00c7165147ddb83af9eca_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f81e38069ac00c7165147ddb83af9eca_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD588122b5812cb15a7d7ceb0be073aa552
SHA1d2eceb9a015a8a7e7f39c5ac2b9fe598bb4f60a1
SHA2565b1663ba6c4949b57b41f02339d16696e26b694b2ac43ba473ce1785b158f0d7
SHA512c3063f1300b1fa92ce6ceef7e87f1d54d49731ce3fc124ae2656650217ddb97d97c3d8a0d5dfb2da23fcc6938d90aeb978481dc6f5e80f88c2a93c5676cdb54d
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
108KB