Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
05-05-2024 15:39
General
-
Target
18534b414b5ef9c8ee854105f6690b2c_JaffaCakes118.exe
-
Size
747KB
-
MD5
18534b414b5ef9c8ee854105f6690b2c
-
SHA1
60506c7caede79201802d79704d6d6274bca49df
-
SHA256
352d82212272193e0a9c92d576f5cde4622ef7d9397b2051dbebb7636dae54ee
-
SHA512
caae9e37387b8396b50ca3ff37d2f52d3584556d79d574998d1d73e995d1504c0c4ecddb4c85f15597bb5ba33d676aa96d30d68e2cc5441b8037c7e9d9257d1d
-
SSDEEP
12288:KUFq7iXiFvvt65QyWYoNacf+8U7zyC2vnzApSBT/o+c:P+iqtUWYZM4Hytfz5N
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\18534b414b5ef9c8ee854105f6690b2c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\18534b414b5ef9c8ee854105f6690b2c_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1844 -s 7642⤵
- Program crash
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
776KB
-
Filesize
160KB
-
Filesize
112KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB