Analysis

  • max time kernel
    141s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 02:07

General

  • Target

    0bfa0f703ddd038d0556f91015ab6c32_JaffaCakes118.exe

  • Size

    106KB

  • MD5

    0bfa0f703ddd038d0556f91015ab6c32

  • SHA1

    d881f45fc395ef7eb0ee57a806df1186ea506ea6

  • SHA256

    5ac5511ec65b777a1ed88e5bcdee305d5c8e4bcf89f231e7ef5667a4ea200a8b

  • SHA512

    7e4603386417f07f9b226243d4cfae87f7cbbad95606d128fd3c815f489b028f5d93b85a1d657e70bf89a45d176d561caf118708fbd4c9c0a9cd7c0cdc3030db

  • SSDEEP

    3072:gbqKTgUtaGQv+k90xoK8b2x2GufvvvvvvvvvvvvvvvvvvvvvvvvKL:j4jwGHk90xoKg7G

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0bfa0f703ddd038d0556f91015ab6c32_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0bfa0f703ddd038d0556f91015ab6c32_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\bassmod.dll

    Filesize

    9KB

    MD5

    780d14604d49e3c634200c523def8351

    SHA1

    e208ef6f421d2260070a9222f1f918f1de0a8eeb

    SHA256

    844eb66a10b848d3a71a8c63c35f0a01550a46d2ff8503e2ca8947978b03b4d2

    SHA512

    a49c030f11da8f0cdc4205c86bec00653ec2f8899983cad9d7195fd23255439291aaec5a7e128e1a103efd93b8566e86f15af89eba4efebf9debce14a7a5564b

  • memory/2872-1-0x0000000000020000-0x0000000000022000-memory.dmp

    Filesize

    8KB

  • memory/2872-0-0x0000000000400000-0x0000000000451000-memory.dmp

    Filesize

    324KB

  • memory/2872-6-0x0000000000400000-0x0000000000451000-memory.dmp

    Filesize

    324KB

  • memory/2872-7-0x0000000000020000-0x0000000000022000-memory.dmp

    Filesize

    8KB