Analysis
-
max time kernel
145s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
18/04/2024, 16:16
General
-
Target
f854cee9615b5903908439f223c4d276_JaffaCakes118.exe
-
Size
84KB
-
MD5
f854cee9615b5903908439f223c4d276
-
SHA1
05a5075771b0c2add25fad82c4c46346635cafe0
-
SHA256
4fa7dcf98f589b5fc9b557b52f57a8fbc48f6ca890e8bd88d36ef4251a545c64
-
SHA512
eb2ea5b27899c1d50e5fa8d2239509532fe921c98ad9b3fe7f7463b2e9de7f22c81b66b7c52ca3c6cf75b35117f5726c35dc398ea8b62672057408881f902761
-
SSDEEP
1536:gHUJHofGkFymIGU4dF7+DbKrjiBHNiZpRId5Jnj7yKvDby2S3p:NHQhI54dFSDerUHsRDGDO5Z
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f854cee9615b5903908439f223c4d276_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f854cee9615b5903908439f223c4d276_JaffaCakes118.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f854cee9615b5903908439f223c4d276_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f854cee9615b5903908439f223c4d276_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
MD5e3c168deb5ba1d16cb12109ed7f4e28a
SHA1dad3f15194cacf0426d3f6d58bd0fa4879ec0da7
SHA25621ad2a0958773c9d3ff975343c5deabebfcd14dc8a5420d1119dbfb30f03c4f0
SHA51260316c08c7401feae566073fe686e94ce399d3e62e771558ea5d41dffe134bb6aa5287cfb56c456aaceb97d44bd48d3b3d495178cf890630eadd0a95aec5c019
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB