Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
06/07/2024, 08:09
General
-
Target
27d87ff9967c3552e5444dc65c2cf4d7_JaffaCakes118.exe
-
Size
2.5MB
-
MD5
27d87ff9967c3552e5444dc65c2cf4d7
-
SHA1
e74308672d3467733bc1d402ef7b4414fc2f8d55
-
SHA256
9dd140e1e45e772fd8fe0b84315e7505b67ca7ddf3f1f0ef82336b40da1eeacb
-
SHA512
95d014fe4e397a97973d1c0b5bf8af1ac2d3180f8729051b1f3d552b24f3b92745ea62956aafbc12c54a8462759b7d5fb32615b31a5c9c089e435967b9dc8aa6
-
SSDEEP
49152:3hvAd9w4a+0cLG0u+PHC4sfOIoJVMVxGOu84UpvyGDPwvOqBKFe//IT:NAvw4a+LLDYSRVsxG1YpvyCIhK+/S
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 9 IoCs
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 46 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\27d87ff9967c3552e5444dc65c2cf4d7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\27d87ff9967c3552e5444dc65c2cf4d7_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
212KB
MD5a67daddcb30335163cf7d99f282f5ae0
SHA1c033169006bef68bebfa77405c4a35688ab41a99
SHA2568027e7512cf17388b14c3e2bbf9c3700f875c26d942a4dd27d1dcf8203a192f8
SHA51216cb5cffdf935d10bb06b86b874a63e9594e4854359885890fe4641f0e4329fd047daa5f0ddd5a02d241974834b67666b2ad65ef791e110d29637434057808c4
-
Filesize
216KB
MD5cba933625bfa502fc4a1d9f34e1e4473
SHA15319194388c0e53321f99f1541b97af191999a09
SHA25625549c7781b3f1b92e73b0ea721d177207cce914a66f3229a71291f2eb160013
SHA512f5fb4b97c4f68a20e0847e6528740ce659c4501726f3b2dff1ac83e88a3b7198099da03edb0f069cd4af7ed568a2373597b235cd239895addfa5226d3a444142
-
Filesize
380KB
MD507f0db2727c8288cd2cf7c4cf352708d
SHA1caf2d1b631c785c1f6f01189cf841fc2661666ed
SHA2563c18183857979a2b5664d3f852f74e3f31f0626720654914453e964938e18f5e
SHA512b81029a2968663a180feca2e3e47f4736f87a7cc73e6a9153aa227b91d963e077f44c5a289b9f64d6b481b7bd5ccb4bcb762048a4f29810c1f4fd4e6106cb0d3
-
Filesize
1.1MB
MD5638e737b2293cf7b1f14c0b4fb1f3289
SHA1f8e2223348433b992a8c42c4a7a9fb4b5c1158bc
SHA256baad4798c3ab24dec8f0ac3cde48e2fee2e2dffa60d2b2497cd295cd6319fd5b
SHA5124d714a0980238c49af10376ff26ec9e6415e7057925b32ec1c24780c3671047ac5b5670e46c1c6cf9f160519be8f37e1e57f05c30c6c4bda3b275b143aa0bf12
-
Filesize
86KB
MD5147127382e001f495d1842ee7a9e7912
SHA192d1ed56032183c75d4b57d7ce30b1c4ae11dc9b
SHA256edf679c02ea2e170e67ab20dfc18558e2bfb4ee5d59eceeaea4b1ad1a626c3cc
SHA51297f5ae90a1bbacfe39b9e0f2954c24f9896cc9dca9d14364c438862996f3bbc04a4aa515742fccb3679d222c1302f5bb40c7eaddd6b5859d2d6ef79490243a4d
-
Filesize
444KB
-
Filesize
272KB
-
Filesize
216KB
-
Filesize
836KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
4KB
-
Filesize
244KB
-
Filesize
836KB