Analysis
-
max time kernel
141s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
25-06-2024 12:43
General
-
Target
0e1ed9bb3722bb5fd0db52e0024a0a86_JaffaCakes118.exe
-
Size
355KB
-
MD5
0e1ed9bb3722bb5fd0db52e0024a0a86
-
SHA1
dee7bc653280baee123c72eff65318d2381b74f4
-
SHA256
9a1c52c6e94a3a1c65be18040e3ce5696bdbdc36070d17d3be70bff5d49dc431
-
SHA512
11da01c60d4b5b0cd63bbc50d31cfcb2b8ee3b7e355d86db826e672c4ac4e54643c814e50de69acf851635ca13a0da13c0522d79007f572a4c03d024370bfa87
-
SSDEEP
6144:7Qw0WAtKvhICR0U6C6XxfmVD4VQy2/qBDZ3+C/CjqMrSG8C1Ncys5:0w0WAtKZPeRONp2Z3+elCMZ
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0e1ed9bb3722bb5fd0db52e0024a0a86_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0e1ed9bb3722bb5fd0db52e0024a0a86_JaffaCakes118.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
876KB
-
Filesize
4KB
-
Filesize
876KB
-
Filesize
4KB