Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-04-2024 09:13

General

  • Target

    04db3f62702b69bbe5630d775d29da03_JaffaCakes118.dll

  • Size

    1.0MB

  • MD5

    04db3f62702b69bbe5630d775d29da03

  • SHA1

    42a926c9f735357d50abb87cc06da8c500626a34

  • SHA256

    23c9e35a5687c1f6bdb060a903c2925ca32ecc2ebcd8150b39c158c149403fc0

  • SHA512

    3bce6519315c8090d2ba0e42375c164f892c35005c95c1eddf94b659367059b73fcf1d2c3288d223a980b0e806947cd32e6b03d834743200da2b8afe68fd7543

  • SSDEEP

    12288:pJo3YJaznF6tiF/NvI0q0lPl3YhGFrAtpxE5xfaVv9E+kXjFLT5QOgP/w3X46BZN:p8UinF6EU+Puh0c3wH4639ud2umh

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\04db3f62702b69bbe5630d775d29da03_JaffaCakes118.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2216
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\04db3f62702b69bbe5630d775d29da03_JaffaCakes118.dll,#1
      2⤵
        PID:2784

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads