Overview

overview

10

Static

static

5

8f030eebe5...18.exe

windows7-x64

1

8f030eebe5...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    02-06-2024 18:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe

  • Size

    1.1MB

  • MD5

    8f030eebe597a7e0b1fd57b59c10bf58

  • SHA1

    97039cb437fa33ccea444b61b6464d876556359d

  • SHA256

    0da0aecf4d4a97942a5fb6c591a8947243a76aee5e2ca35a30ec3aa77c6adf7b

  • SHA512

    3bd66a2bee6a9070d0e4cf4e114164cd7be73833a0a88d03d4dae355c7b637266c093e5659e2865ae67717719f0ab926e99ab2c5f1d70e207e98c52e92501cc2

  • SSDEEP

    24576:QAHnh+eWsN3skA4RV1Hom2KXMmHaV2z1eurdEmzWK85:Hh+ZkldoPK8YaVHWyms

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 24 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe
      "C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe"
      2⤵
        PID:2088
      • C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe
        "C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe"
        2⤵
          PID:2864
        • C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe
          "C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe"
          2⤵
            PID:1928
          • C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe
            "C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe"
            2⤵
              PID:2860
            • C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe
              "C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe"
              2⤵
                PID:3008
              • C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe
                "C:\Users\Admin\AppData\Local\Temp\8f030eebe597a7e0b1fd57b59c10bf58_JaffaCakes118.exe"
                2⤵
                  PID:2264

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/1732-0-0x0000000000120000-0x0000000000121000-memory.dmp

                Filesize

                4KB

                Download