Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
18-06-2024 08:15
General
-
Target
baae78ebf646cf42abde7924793c978b_JaffaCakes118.exe
-
Size
322KB
-
MD5
baae78ebf646cf42abde7924793c978b
-
SHA1
a1a5f775a434c9be3495812424145b74d4da432f
-
SHA256
49b695f3657509f682b3f2af64f9350529aa2f21963517a4c555bbd2a5352226
-
SHA512
517e456985908b6eb4028d092e5b9e3fb708aeeb79ccbae59b8b1984a6ad5603157a05d98bb02e8c266fdd49524c5ea6dc16fbff6aef1ff0f301e701e8069386
-
SSDEEP
6144:l22hiKcXo8KMEHZwkeyYmlJ5KdsMH3soCzwyT8gca/ssuBL:ldhiJE5Eml/+Kz9u
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\baae78ebf646cf42abde7924793c978b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\baae78ebf646cf42abde7924793c978b_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 840 -s 6042⤵
- Program crash
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
344KB
-
Filesize
128KB
-
Filesize
6.9MB
-
Filesize
48KB
-
Filesize
4KB
-
Filesize
6.9MB