Analysis
-
max time kernel
150s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 22:40
Behavioral task
behavioral1
Sample
a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe
-
Size
4.2MB
-
MD5
a6efc429f637282b4e391893a747c31c
-
SHA1
1b47a99694cd89769845024edd21e9552b670007
-
SHA256
9d21148128fd4a02aa5432e0decd6e82c5a167f90f12b6aff9b9a036145ca4ae
-
SHA512
8a8b10befee25b5ced633f614543ba22a17bfe0596dd1c973cceee9d6a6f34ee6782c9aafad2e4285ec6fb0cc6d520fca95f9fef0382e43ce942c9fcbfb5f106
-
SSDEEP
98304:Zg7ZxESAmnpKmSmwb4qbKuoUi5Eb0WS/8qRLT9CypNsd:W7KmprSmwb4qbjaGb5mHlTN
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/2208-0-0x0000000000400000-0x00000000013EB000-memory.dmp upx behavioral1/memory/2208-2-0x0000000000400000-0x00000000013EB000-memory.dmp upx behavioral1/memory/2208-5-0x0000000000400000-0x00000000013EB000-memory.dmp upx behavioral1/memory/2208-8-0x0000000000400000-0x00000000013EB000-memory.dmp upx -
Suspicious use of FindShellTrayWindow 64 IoCs
Processes:
a6efc429f637282b4e391893a747c31c_JaffaCakes118.exepid process 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe -
Suspicious use of SendNotifyMessage 64 IoCs
Processes:
a6efc429f637282b4e391893a747c31c_JaffaCakes118.exepid process 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
a6efc429f637282b4e391893a747c31c_JaffaCakes118.exepid process 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe 2208 a6efc429f637282b4e391893a747c31c_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2208-0-0x0000000000400000-0x00000000013EB000-memory.dmpFilesize
15.9MB
-
memory/2208-1-0x00000000001C0000-0x00000000001C1000-memory.dmpFilesize
4KB
-
memory/2208-2-0x0000000000400000-0x00000000013EB000-memory.dmpFilesize
15.9MB
-
memory/2208-5-0x0000000000400000-0x00000000013EB000-memory.dmpFilesize
15.9MB
-
memory/2208-7-0x0000000000280000-0x0000000000281000-memory.dmpFilesize
4KB
-
memory/2208-8-0x0000000000400000-0x00000000013EB000-memory.dmpFilesize
15.9MB