Analysis
-
max time kernel
51s -
max time network
53s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
14-06-2024 05:44
Static task
static1
Behavioral task
behavioral1
Sample
a833559a9b3bccedc8dcca82044cdb11_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a833559a9b3bccedc8dcca82044cdb11_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a833559a9b3bccedc8dcca82044cdb11_JaffaCakes118.exe
-
Size
312KB
-
MD5
a833559a9b3bccedc8dcca82044cdb11
-
SHA1
cc13a7f6d65c27e57e173de624d2f3801750288e
-
SHA256
132913aa87c219bdbef57179b57be356cdde1fb5a68c93b5a5fb7d3b07d07422
-
SHA512
ec15b3ee07d71ccca42b5f6dc252e7966ba2e90e3753e2000cd22c8bc290eb041701b99622cd0d9e008671894f70308a1ea6a80b6e3802d36228ef6943ffe005
-
SSDEEP
6144:nV24jwnTGLyoE2fsAu6i6xgB1A/QXoCPk96zmiYlW:nV2mwnTyyoE2fsz6xgBu1CsW
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 1508 a833559a9b3bccedc8dcca82044cdb11_JaffaCakes118.exe 1508 a833559a9b3bccedc8dcca82044cdb11_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1508 a833559a9b3bccedc8dcca82044cdb11_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1508 a833559a9b3bccedc8dcca82044cdb11_JaffaCakes118.exe 1508 a833559a9b3bccedc8dcca82044cdb11_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
242KB
MD587eab94f6e6627bd2fd3170f95a2eed9
SHA12a97153c16443db59bb9887ac982293250ebdb1b
SHA256a60c5b1d5cdddf7a08e1af8a58b7e0fe1d09b08e4938f61f207e149b30d6653c
SHA5121697582fc05aa087c2a680020ca56fafb8af424be7cef3428b840c86594a18e6bc447e4ad8becc3f63c63c918763fdba8252c72c6b3855ba783a4800c7e2ab92