Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
10/05/2024, 02:33
Static task
static1
Behavioral task
behavioral1
Sample
2ceadce71658ebcda2db7ad47c333157_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2ceadce71658ebcda2db7ad47c333157_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2ceadce71658ebcda2db7ad47c333157_JaffaCakes118.exe
-
Size
425KB
-
MD5
2ceadce71658ebcda2db7ad47c333157
-
SHA1
f9264746d26feaad30a848bdd4e1c088ab17a242
-
SHA256
23e2240477d25d674f2e82d325b2ee89a83c22f64f43550f1c2f404217e88a56
-
SHA512
5e11a5beab747d0f15729d4b57ea8c9e8d21d5322ee608f018525feb54452cd77a174ec5a8a919bd074c5bbccc150f36a9ab004008ab07a689275256fcfea0a5
-
SSDEEP
12288:Q5CwGs01q9xEkXrbKGBgzoE3OpOmKwEv13Y84Fs/Mq:sGiotiF8d
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 1912 2ceadce71658ebcda2db7ad47c333157_JaffaCakes118.exe 1912 2ceadce71658ebcda2db7ad47c333157_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1912 2ceadce71658ebcda2db7ad47c333157_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1912 2ceadce71658ebcda2db7ad47c333157_JaffaCakes118.exe 1912 2ceadce71658ebcda2db7ad47c333157_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
362KB
MD5a5b53d4d51dbda86a55f141018c93e64
SHA1c009a6afba04dfb9511effa766d36e11fa333f39
SHA2569521f1facb1632d54fe2ddba659894b4ec5cd4edd822c051f1005f54f952e699
SHA512d51df3b5076384dc83759ef5729fc1ac59276d0f6b7bff384e95d1b441907766b8ad17c7f3b4a503ea15fb7bd1a92773e5558127a5fd491cb9c687dd826d249d