Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
12/06/2024, 22:06
Static task
static1
Behavioral task
behavioral1
Sample
a29dea65d59a645b81d3d986335236b7_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a29dea65d59a645b81d3d986335236b7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a29dea65d59a645b81d3d986335236b7_JaffaCakes118.exe
-
Size
3.8MB
-
MD5
a29dea65d59a645b81d3d986335236b7
-
SHA1
2cd723bdbf23cf05a81a2b78ad59ef5ddfe4484f
-
SHA256
0cebf87525818bcade723e3707a395a4d830eac75cfc3a68997711175f08389d
-
SHA512
2e0b167f20d39f6efbd6259e336bfd59b2ef8ec6e427b35cf034fc226e282f2562d7c7c60e637c90c424610aa2e95ea7553bf0c13f0563fa8335dff7ecf762a5
-
SSDEEP
98304:VY3h1Ofy7iqg2OYONOlUkct2JQoBgqIQ1cc0nqpV9u1O:V6Of4i6OYON/J2JV2rVhqpVMo
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 3720 a29dea65d59a645b81d3d986335236b7_JaffaCakes118.tmp -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2496 wrote to memory of 3720 2496 a29dea65d59a645b81d3d986335236b7_JaffaCakes118.exe 82 PID 2496 wrote to memory of 3720 2496 a29dea65d59a645b81d3d986335236b7_JaffaCakes118.exe 82 PID 2496 wrote to memory of 3720 2496 a29dea65d59a645b81d3d986335236b7_JaffaCakes118.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\a29dea65d59a645b81d3d986335236b7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a29dea65d59a645b81d3d986335236b7_JaffaCakes118.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2496 -
C:\Users\Admin\AppData\Local\Temp\is-4B6AQ.tmp\a29dea65d59a645b81d3d986335236b7_JaffaCakes118.tmp"C:\Users\Admin\AppData\Local\Temp\is-4B6AQ.tmp\a29dea65d59a645b81d3d986335236b7_JaffaCakes118.tmp" /SL5="$600E0,3522987,121344,C:\Users\Admin\AppData\Local\Temp\a29dea65d59a645b81d3d986335236b7_JaffaCakes118.exe"2⤵
- Executes dropped EXE
PID:3720
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD534acc2bdb45a9c436181426828c4cb49
SHA15adaa1ac822e6128b8d4b59a54d19901880452ae
SHA2569c81817acd4982632d8c7f1df3898fca1477577738184265d735f49fc5480f07
SHA512134ff4022571efd46f7a62e99b857ebe834e9916c786345908010f9e1fb90be226b740ddee16ae9290fe45c86be7238c4555e422abe66a461d11545e19734beb