Analysis
-
max time kernel
141s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
19-04-2024 14:01
General
-
Target
fa744c5aa4e672896261438b97eee4ef_JaffaCakes118.exe
-
Size
842KB
-
MD5
fa744c5aa4e672896261438b97eee4ef
-
SHA1
a482bd68ec430a19282eea3c07a388093e57fff4
-
SHA256
05bc36502408467417476f6f6829b34d2e4b0e21ffd87a8227c7d4271a47c0c7
-
SHA512
704a05d6f1cf09a63bf16fdc1a746062451d9a345450cfa5b93d68d4e342f5e1090e7d6509c873cb2fc060549f9688bd61a7f5daf6c08d45c638efacb6ffe640
-
SSDEEP
12288:M7OkPVpSfAMEbmW3t9oPt2QWfIwV4j8eBhtuKG+YWpafR70fvg92iYttMhmNdvVc:M2AP9a2DIHg+tNG/WpaJ7uvBibqdv/Fw
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 14 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa744c5aa4e672896261438b97eee4ef_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fa744c5aa4e672896261438b97eee4ef_JaffaCakes118.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
-
Filesize
2.5MB