Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
08-05-2024 20:46
Static task
static1
Behavioral task
behavioral1
Sample
26aa9b7bf926ffa61dd823895ce0a868_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
26aa9b7bf926ffa61dd823895ce0a868_JaffaCakes118.exe
-
Size
766KB
-
MD5
26aa9b7bf926ffa61dd823895ce0a868
-
SHA1
f7ae1863e31a855feb8956b3c113afb8a1992e47
-
SHA256
51be25e5c754614603992540797d953736c4ac163818db5de69734fabb2f8f82
-
SHA512
08cf1deef378097a14a94b5fdd1186865cf18c62f010ddf4bfd714faf869232385cc8cf9682328fae2752bd5690034e4239c2fb8878defce53c7d4918f2f5050
-
SSDEEP
12288:b58WhWmNEYOyd4Sau/yaqDzjnOeX6nKAZgDpaSO3nMJibf41y99zzSl+XoEzz1wt:b5dxN/4k/yGrB9zztzzK
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2420 26aa9b7bf926ffa61dd823895ce0a868_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2420 26aa9b7bf926ffa61dd823895ce0a868_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2420 26aa9b7bf926ffa61dd823895ce0a868_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
94KB
MD514ff402962ad21b78ae0b4c43cd1f194
SHA1f8a510eb26666e875a5bdd1cadad40602763ad72
SHA256fb9646cb956945bdc503e69645f6b5316d3826b780d3c36738d6b944e884d15b
SHA512daa7a08bf3709119a944bce28f6ebdd24e54a22b18cd9f86a87873e958df121a3881dcdd5e162f6b4e543238c7aef20f657c9830df01d4c79290f7c9a4fcc54b