Analysis
-
max time kernel
141s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
03/07/2024, 13:59
General
-
Target
229a9f5b9636fd6e0c7d2416dd1b18a0_JaffaCakes118.exe
-
Size
371KB
-
MD5
229a9f5b9636fd6e0c7d2416dd1b18a0
-
SHA1
ad33606b3f56ced7d7fd4722936cf1ebd6a3a82f
-
SHA256
e9016068aaeb2125ca3d1b9ab88e90328d8d248cce6b01106bcbde1be5ada5e2
-
SHA512
d1f3731d08359e1f8055dd7efc02ef0865091a515acbbb65971e55e4aa9abf1522fe08ec28e7ee95634568e42b30bc8e4b4d90dc56498970e2d5bdbd7a3fe079
-
SSDEEP
6144:XxHuKRw7jIUS0gfPJlK1xU3y7TyM+dVRDjlDbLdSD3qycQrms89n0:hHupoUSFfRZyn5+FjlD/dSrPJH
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 7 IoCs
-
Suspicious use of SendNotifyMessage 7 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\229a9f5b9636fd6e0c7d2416dd1b18a0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\229a9f5b9636fd6e0c7d2416dd1b18a0_JaffaCakes118.exe"1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
924KB
-
Filesize
4KB
-
Filesize
924KB
-
Filesize
4KB