Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
16-05-2024 10:12
General
-
Target
4a900f2aa71746ea06b562a2af8bcd1c_JaffaCakes118.exe
-
Size
9.1MB
-
MD5
4a900f2aa71746ea06b562a2af8bcd1c
-
SHA1
58eabb8a1e9c57cbff797ead0d64fff4600765c0
-
SHA256
379f4c57ae3a0643b260d8cf97a2b7aeea4b00903d4fee346cfed36d60b06651
-
SHA512
00080d464f7c21b48a104f4ea2500969f16e31a216ede5553597b959e97254f98951daa60f4625cf238ca0995309b74fdbc6f66b2ca1c1977f91048a9d2888e9
-
SSDEEP
196608:auhsIrbKdj7G6Re1WQkY1XEUkQmajXnlU0PHkHOjCBpOIVERR:aSbKLerk63VnLnlUC22CJE
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Obfuscated with Agile.Net obfuscator 5 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4a900f2aa71746ea06b562a2af8bcd1c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4a900f2aa71746ea06b562a2af8bcd1c_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3164 -s 21682⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3164 -ip 31641⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD57eea1b45d6f5cfb7d8211293fdb0b953
SHA17f2ab34af34a5423b734f8a94e5b61c4cb774805
SHA25667b843fe0401061f447b9f76078f31b5517aab89e1712922736fdc6bcd8507b3
SHA512f3ae3ef31c41a685ec52ff9323ba504d86901a30a759b7f6e1acf3d7576ee8f4361598b380f47e08a9ca4bdee360a6e4e2ef53a82b6d80550c98f051dd4ce248
-
Filesize
7.7MB
-
Filesize
3.8MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
20.4MB
-
Filesize
20.4MB
-
Filesize
4KB
-
Filesize
760KB
-
Filesize
760KB
-
Filesize
20.4MB
-
Filesize
3.8MB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
624KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
7.7MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
344KB
-
Filesize
760KB
-
Filesize
20.4MB
-
Filesize
20.4MB
-
Filesize
7.7MB
-
Filesize
20.4MB