Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    29-04-2024 17:54

General

  • Target

    0844676e1a01fe4dbddaac8ee7c02fb5_JaffaCakes118.exe

  • Size

    294KB

  • MD5

    0844676e1a01fe4dbddaac8ee7c02fb5

  • SHA1

    1ace3d59096f12a00d8ad43a049c8d1d40cdaab4

  • SHA256

    12edddc38556dfe95064c7dfc53a724d8d0860146e4fd39ee8c3339a228d919a

  • SHA512

    84db502032762b1b6f8a826f4b7212cfb2aea53424c6bfe5fc168aefe3204561a1922ca91f0bf21733fe3e5bf17b40c15597ad3a336d045ae00ab0f04cb54546

  • SSDEEP

    6144:nsOzi5Kl8h5ei3N2M0smSX8xh9hjw+BD/5vsidxkl8dDY0StwW:nr+4YeC8xxXj5ldRDY0Stw

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0844676e1a01fe4dbddaac8ee7c02fb5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0844676e1a01fe4dbddaac8ee7c02fb5_JaffaCakes118.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2276
    • C:\Users\Admin\AppData\Local\Temp\0844676e1a01fe4dbddaac8ee7c02fb5_JaffaCakes118.exe
      tear
      2⤵
        PID:2100

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2100-3-0x0000000000400000-0x0000000000460000-memory.dmp

      Filesize

      384KB

    • memory/2100-5-0x0000000000400000-0x0000000000460000-memory.dmp

      Filesize

      384KB

    • memory/2100-4-0x0000000000260000-0x0000000000261000-memory.dmp

      Filesize

      4KB

    • memory/2100-6-0x0000000000400000-0x0000000000460000-memory.dmp

      Filesize

      384KB

    • memory/2276-0-0x0000000000400000-0x0000000000460000-memory.dmp

      Filesize

      384KB

    • memory/2276-2-0x0000000000400000-0x0000000000460000-memory.dmp

      Filesize

      384KB