65f17835ed2bf9d054831beef9f459671b4b8f41a68d38d8cb80a513c7d1362e

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
29/04/2024, 18:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0858e4c4cfc28a406399178b97fab633_JaffaCakes118.exe
Size

28KB
MD5

0858e4c4cfc28a406399178b97fab633
SHA1

b824510a55e9c6ca7224b4f2b6cfb34889d5fb06
SHA256

65f17835ed2bf9d054831beef9f459671b4b8f41a68d38d8cb80a513c7d1362e
SHA512

e1dabbd009d239ac5c2af705b0d241da7c90e6856b9ee255073dadad7822409866962a4092fdd8e3aec42810c46d3802ba1a97b07cbc888a5270232c6ec19eb4
SSDEEP

768:a+486NJYPilkMpEllZtbf1ZngxQsoewc7DX:az/YalkMmlhfcOLewu

Score

6^/10

evasion trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	0858e4c4cfc28a406399178b97fab633_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0858e4c4cfc28a406399178b97fab633_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0858e4c4cfc28a406399178b97fab633_JaffaCakes118.exe"
1⤵
- Checks whether UAC is enabled
PID:2052

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2052-0-0x0000000001000000-0x0000000001015000-memory.dmp

Filesize
84KB

Download
memory/2052-1-0x0000000001000000-0x0000000001015000-memory.dmp

Filesize
84KB

Download