Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
21-04-2024 05:17
General
-
Target
fe856c84207e255aa48dbec47ccb935e_JaffaCakes118.exe
-
Size
82KB
-
MD5
fe856c84207e255aa48dbec47ccb935e
-
SHA1
7d9b141648df4cee373c86df24c59f2d51e4b456
-
SHA256
17dfae485f86dbf73fcbf3003c6fa95984e194c3b204b640fc9c825996651131
-
SHA512
5fe82b2b61762622e110bedc07658e3990e2899e6131986415d52e8726868d304a7d7cd98cdbaa39318df54eab8ea855846783fc820cac22b404c318a5b6291b
-
SSDEEP
1536:b33/YAoqNnrnq35OHDgvKls1XYQd8SxaXrWkg5VEfcGlYiajIVGRh:bRNrnq35ge1XhyRQVEfyrz
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe856c84207e255aa48dbec47ccb935e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fe856c84207e255aa48dbec47ccb935e_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\fe856c84207e255aa48dbec47ccb935e_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\fe856c84207e255aa48dbec47ccb935e_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5bdfb9caeae4b4b85621511f451ad9479
SHA110438f4e673de7a293d4189de57c78e8cd7250fc
SHA256072b8c45f5d95a03b422daa6e882d345fb95f9aa7b413c4cc163d620b45afabc
SHA5128deaaa14389005121b308b1a90102be94ea9c4cb81c1fd900020b19aa74cd12d441cc9f1dffed832f0fa950edbd37d803f1197739e47c0f63cc1f280c9bcfe33
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB