Analysis

  • max time kernel
    140s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24-06-2024 23:41

General

  • Target

    0b5180a4b9d53df706725bc1b6fc3b6f_JaffaCakes118.exe

  • Size

    2.1MB

  • MD5

    0b5180a4b9d53df706725bc1b6fc3b6f

  • SHA1

    3f118ab74d73e5803cff815895c751e5bcdbf8e4

  • SHA256

    d2298dbd28c0dc876be15ba8dcdbde9f61d1ed7f93d5868214c7d0b037707826

  • SHA512

    ac8cd6118d06f9eb005c8a0c72579f6d211895991f607d1de088a92fb5b10e8a413e74ff058d4fc1bcf421d5c70bd9eebb7110a4c0a48553ad061dff7a41e876

  • SSDEEP

    49152:TKT14C/ut+snnvrw0wH2rQNpdk/Y256JFURj4jqpYJn7UlFp:4x5mk0wWez256sR2Jno

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0b5180a4b9d53df706725bc1b6fc3b6f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0b5180a4b9d53df706725bc1b6fc3b6f_JaffaCakes118.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/756-0-0x0000000000400000-0x000000000082A000-memory.dmp

    Filesize

    4.2MB

  • memory/756-1-0x00000000001B0000-0x00000000001B2000-memory.dmp

    Filesize

    8KB

  • memory/756-2-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/756-5-0x0000000000400000-0x000000000082A000-memory.dmp

    Filesize

    4.2MB

  • memory/756-7-0x00000000001B0000-0x00000000001B2000-memory.dmp

    Filesize

    8KB

  • memory/756-8-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB