Analysis

  • max time kernel
    51s
  • max time network
    51s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-06-2024 12:25

General

  • Target

    15ffca45b1f0869b32f23fc29d4cb5fa_JaffaCakes118.exe

  • Size

    267KB

  • MD5

    15ffca45b1f0869b32f23fc29d4cb5fa

  • SHA1

    bbd3a10769ef45ba766480e58f97bef3d0114d8c

  • SHA256

    9051eec5d24a085599c21eb87b1631fa2ac5fd8cdc40c357d31ec3857fab4ff2

  • SHA512

    b91a26ec3b3c62ee2822a5a2da2037d88ec5b85845accafc7cef446f6cf9bb273884e6e6a33fa74207ddf769a3fa1078648b557640555cb4525dd4120532f103

  • SSDEEP

    6144:SZC4d3lbxc6wU/UP+XhdMRFD3LAwektjoSwTBGH4l:r4dMRU/UP4heFjLDFtjoSwoa

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\15ffca45b1f0869b32f23fc29d4cb5fa_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\15ffca45b1f0869b32f23fc29d4cb5fa_JaffaCakes118.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2364-0-0x0000000000400000-0x0000000000494000-memory.dmp

    Filesize

    592KB

  • memory/2364-1-0x0000000000400000-0x0000000000494000-memory.dmp

    Filesize

    592KB

  • memory/2364-2-0x0000000000400000-0x0000000000494000-memory.dmp

    Filesize

    592KB

  • memory/2364-3-0x0000000000400000-0x0000000000494000-memory.dmp

    Filesize

    592KB