Analysis
-
max time kernel
145s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
20/05/2024, 04:00
General
-
Target
5d1308a021bbc57ca8f23a7e559a4e4f_JaffaCakes118.exe
-
Size
7.1MB
-
MD5
5d1308a021bbc57ca8f23a7e559a4e4f
-
SHA1
0b371cd714383452148276dc42f184e055449b43
-
SHA256
8b68b6df220527237b2e95da76e5a1e4bf9cb1cfadbf8446732a93623a2d4a0c
-
SHA512
70ab1685ceec8b30f3eb3ced2903fdd3019dea35104a4f7c4e45c096fdd65c7dc3c66b57356b3a388646d2f27aa8a589844da55674499e07004dda34f001b08a
-
SSDEEP
196608:86DvJp/bsuMP0vwDoZxip5lHiGhRs5dzn:JDvX/bNvv6oZxiXlHVQ
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5d1308a021bbc57ca8f23a7e559a4e4f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5d1308a021bbc57ca8f23a7e559a4e4f_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
88KB
MD53e7120d5f23a37451cfc5cbe8440259e
SHA1ca857f93087a806e64ed7a1ca297eb3f9354ad88
SHA25668f3fbbb8ae5c46c439bb3c86637a66b27c8c8ae6e49a71b3e5e8a8c35bf1346
SHA512130fc6cd7057734b391da472243d512dbbd8eee53d95ac15f0d73850f2b37ca3f97703127a14ea20d29864308993a2ff17a3fbf2e03bc9fea5a7491ca572e7aa
-
Filesize
3.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
84KB
-
Filesize
3.1MB
-
Filesize
84KB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB