Analysis
-
max time kernel
52s -
max time network
54s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
16-06-2024 23:32
Static task
static1
Behavioral task
behavioral1
Sample
b5c15340bdb3a8cafd93bbfd800f6b57_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b5c15340bdb3a8cafd93bbfd800f6b57_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b5c15340bdb3a8cafd93bbfd800f6b57_JaffaCakes118.exe
-
Size
313KB
-
MD5
b5c15340bdb3a8cafd93bbfd800f6b57
-
SHA1
3a720b11d21b30f94f54e549dd9143093c942c73
-
SHA256
795ebf38c5c03ae08bf9d86c54334e2e0de401fd4f13d5aee8efd53a6229d2b1
-
SHA512
1a949c71909d29488b5b8469e866a8a4e29efb377b6df07b18609f876801a8f49cd06371297346c04e1c2e82405912cf3d1b6b94abfefac27d3f8039896e1ca3
-
SSDEEP
6144:uV24jwRTGLyog2fsAu6i6xgB1A/W1Z0fu96euCkY1:uV2mwRTyyog2fsz6xgBumH
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 4456 b5c15340bdb3a8cafd93bbfd800f6b57_JaffaCakes118.exe 4456 b5c15340bdb3a8cafd93bbfd800f6b57_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4456 b5c15340bdb3a8cafd93bbfd800f6b57_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4456 b5c15340bdb3a8cafd93bbfd800f6b57_JaffaCakes118.exe 4456 b5c15340bdb3a8cafd93bbfd800f6b57_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
242KB
MD5f6cb534a58dcc29446b518fd294e82ad
SHA1797935cd7ab355a55efa733fe8d7aadd09167d4b
SHA256e7060cc8801db67b198e276e6f92355137ea3afd39797bf6b973b0bc822828df
SHA51230738a097c8c9eecd0fc27b3d02796e5c9400bf7214710e57d932348bfe4752ce80dd6bd0d24c254b3032226bd017b7201a920d8a5b02e37d61a38c171bf28cb