Analysis
-
max time kernel
140s -
max time network
55s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20/06/2024, 13:35
Static task
static1
Behavioral task
behavioral1
Sample
06787fbd7a3443f4351ec3086490e1b0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06787fbd7a3443f4351ec3086490e1b0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
06787fbd7a3443f4351ec3086490e1b0_JaffaCakes118.exe
-
Size
75KB
-
MD5
06787fbd7a3443f4351ec3086490e1b0
-
SHA1
0ed6299c94cd8e64c7cc0ae9e579ba6aeaec38da
-
SHA256
1c4f5dcedf476f1e15540138c593c823aec7d90521f629cd929d782ae1264c66
-
SHA512
4160420952779c3bd88880b23bcfc842c7f7e8da35a2629ee10df573aa3e38a5159a3aec56018361310af84f2b5479891fafa4f2dc772fbc4e2ed771399a65d8
-
SSDEEP
1536:AIqlamQH56zjAkqyQLGj5N0PQYPiHCj/TngCzS9aUeJRLPM:k3zjhUGsHVgCzS9aPRLM
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 3580 06787fbd7a3443f4351ec3086490e1b0_JaffaCakes118.exe 3580 06787fbd7a3443f4351ec3086490e1b0_JaffaCakes118.exe -
Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\MSINFO\atmQQ2.dll 06787fbd7a3443f4351ec3086490e1b0_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3580 06787fbd7a3443f4351ec3086490e1b0_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
54KB
MD51977edd593550bf9d9bc4d4e4d1879e1
SHA16769c3591a4b725c9a14bf385c0db48c738621d7
SHA256b50d4c5853e65a73e33e438ba985cda8462d4a145f113353aa3133c40c06bba2
SHA5121e97cce3de4eb95308679986bcfd0eee306224a0c5ba0379717645de360cc309b571bfad442717ec2bb66438df23021b22152ae230b78c82e9fd060634586c3e