Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    06-07-2024 08:50

General

  • Target

    27f4206aa7be244d1c478b1b24998d48_JaffaCakes118.exe

  • Size

    52KB

  • MD5

    27f4206aa7be244d1c478b1b24998d48

  • SHA1

    7f3ca10579fa63c283b8dc6661497686481bff2d

  • SHA256

    226f5cd8bc80ef02f26001a6ca51a37114b524e7827f474f2003aee09a8c9b70

  • SHA512

    46862425de60b6d6870c31b36160226cb5d68480f8bdd4eda96c350e605075bb29b34b7ec01e04b228aeb1da8f9b2cedfdcfc9e087a7a1302f24b19a1ff4fedf

  • SSDEEP

    768:OqObMzwzz083Jzq4fZ4RB+Hgxcmg90JA4s4WqFECMD8T6KMaZqB53yvKy:+DZq4h4RBfWqeCMD8T6KMpB53yvKy

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\27f4206aa7be244d1c478b1b24998d48_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\27f4206aa7be244d1c478b1b24998d48_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2412-0-0x0000000000400000-0x000000000040E000-memory.dmp

    Filesize

    56KB

  • memory/2412-13-0x0000000000380000-0x0000000000390000-memory.dmp

    Filesize

    64KB

  • memory/2412-28-0x0000000001DC0000-0x0000000001DD0000-memory.dmp

    Filesize

    64KB

  • memory/2412-27-0x0000000001DB0000-0x0000000001DC0000-memory.dmp

    Filesize

    64KB

  • memory/2412-26-0x0000000001DA0000-0x0000000001DB0000-memory.dmp

    Filesize

    64KB

  • memory/2412-25-0x0000000001D90000-0x0000000001DA0000-memory.dmp

    Filesize

    64KB

  • memory/2412-24-0x0000000000480000-0x0000000000490000-memory.dmp

    Filesize

    64KB

  • memory/2412-23-0x0000000000470000-0x0000000000480000-memory.dmp

    Filesize

    64KB

  • memory/2412-22-0x0000000000460000-0x0000000000470000-memory.dmp

    Filesize

    64KB

  • memory/2412-21-0x0000000000450000-0x0000000000460000-memory.dmp

    Filesize

    64KB

  • memory/2412-20-0x0000000000440000-0x0000000000450000-memory.dmp

    Filesize

    64KB

  • memory/2412-19-0x0000000000430000-0x0000000000440000-memory.dmp

    Filesize

    64KB

  • memory/2412-18-0x0000000000420000-0x0000000000430000-memory.dmp

    Filesize

    64KB

  • memory/2412-17-0x0000000000410000-0x0000000000420000-memory.dmp

    Filesize

    64KB

  • memory/2412-16-0x00000000003F0000-0x0000000000400000-memory.dmp

    Filesize

    64KB

  • memory/2412-15-0x00000000003A0000-0x00000000003B0000-memory.dmp

    Filesize

    64KB

  • memory/2412-14-0x0000000000390000-0x00000000003A0000-memory.dmp

    Filesize

    64KB

  • memory/2412-12-0x0000000000370000-0x0000000000380000-memory.dmp

    Filesize

    64KB

  • memory/2412-11-0x0000000000360000-0x0000000000370000-memory.dmp

    Filesize

    64KB

  • memory/2412-10-0x0000000000350000-0x0000000000360000-memory.dmp

    Filesize

    64KB

  • memory/2412-9-0x0000000000340000-0x0000000000350000-memory.dmp

    Filesize

    64KB

  • memory/2412-8-0x0000000000330000-0x0000000000340000-memory.dmp

    Filesize

    64KB

  • memory/2412-7-0x0000000000310000-0x0000000000320000-memory.dmp

    Filesize

    64KB

  • memory/2412-6-0x0000000000300000-0x0000000000310000-memory.dmp

    Filesize

    64KB

  • memory/2412-5-0x00000000002F0000-0x0000000000300000-memory.dmp

    Filesize

    64KB

  • memory/2412-4-0x00000000002D0000-0x00000000002E0000-memory.dmp

    Filesize

    64KB

  • memory/2412-3-0x00000000002C0000-0x00000000002D0000-memory.dmp

    Filesize

    64KB

  • memory/2412-2-0x00000000002B0000-0x00000000002C0000-memory.dmp

    Filesize

    64KB

  • memory/2412-1-0x0000000000220000-0x0000000000230000-memory.dmp

    Filesize

    64KB

  • memory/2412-29-0x0000000001DD0000-0x0000000001DE0000-memory.dmp

    Filesize

    64KB

  • memory/2412-30-0x0000000001DE0000-0x0000000001DF0000-memory.dmp

    Filesize

    64KB

  • memory/2412-32-0x0000000001DF0000-0x0000000001E00000-memory.dmp

    Filesize

    64KB

  • memory/2412-33-0x0000000000400000-0x000000000040E000-memory.dmp

    Filesize

    56KB