Analysis
-
max time kernel
93s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
29/05/2024, 15:11
Static task
static1
Behavioral task
behavioral1
Sample
8129cc5108ffb4d41a878b423762f381_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8129cc5108ffb4d41a878b423762f381_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
8129cc5108ffb4d41a878b423762f381_JaffaCakes118.exe
-
Size
312KB
-
MD5
8129cc5108ffb4d41a878b423762f381
-
SHA1
2234dfb09f477146e05860a1704464a87d4e78c7
-
SHA256
7ca83defae07088ed1f31669bf457decbd899db46463739f0eb8826d19fbfbf2
-
SHA512
64e51a914c9d35ce2cfa798c96c2f0e7b5986b0b640b12d186f0467a238f896c4cb344f063ba973eee1ff8dc3295f69e897eea864535242235953c4c06df97cf
-
SSDEEP
6144:Lweks+CRnAGLyo8MdROCZVtSH7zsKeEM9NBJZY5:UeknClASyo8MdRO2tSH7zs2
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 4468 8129cc5108ffb4d41a878b423762f381_JaffaCakes118.exe 4468 8129cc5108ffb4d41a878b423762f381_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4468 8129cc5108ffb4d41a878b423762f381_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4468 8129cc5108ffb4d41a878b423762f381_JaffaCakes118.exe 4468 8129cc5108ffb4d41a878b423762f381_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
242KB
MD5c4a0d2165a51256cc6eac8f5070d4094
SHA107ed3c4d0d4e168b05784a8204e1727a9db0eb74
SHA25654efdef3fbaa88bc58b7a4062d742be6a745bd73d50d80a3e3556e79578bd378
SHA512c03bd2c24c2754c6ccb8ee18fac486438f984374bac3654356905cb4a8c5e823ba250ea0245b2347e43f459567d3281a6ca09c4d81d014f3263456a211012a4f