Overview

overview

3

Static

static

3

2a43e88595...18.exe

windows7-x64

1

2a43e88595...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/07/2024, 00:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2a43e8859574e3a9252e91919bf2f3d0_JaffaCakes118.exe

  • Size

    88KB

  • MD5

    2a43e8859574e3a9252e91919bf2f3d0

  • SHA1

    7b7324246253ece85fa61ce620f49cbfb05646d0

  • SHA256

    18276c8c14251b04d57822acf2f8d4f37c6726621e742efb7bbf5383dd22ed76

  • SHA512

    aa947c7aedf49b780b2fc7baab01d9b982bad53845fe11c9b208fd78ed36701644d3673446800d7d4c50cc2a02c5d8cdc0f67d71c2b00982f83cd88968b63c27

  • SSDEEP

    1536:d3ETstzWmNGYsDW6oH4/s91CnhQ7XTZdN+LVtwVmdJl9Ygmo/HhzvVrhqsPe:n3BsDOzKnC7jZangS9YkHhzpAsPe

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2a43e8859574e3a9252e91919bf2f3d0_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2a43e8859574e3a9252e91919bf2f3d0_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious behavior: RenamesItself
    PID:1296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1296-0-0x0000000000400000-0x000000000041A000-memory.dmp

    Filesize

    104KB

    Download

  • memory/1296-1-0x0000000000404000-0x0000000000405000-memory.dmp

    Filesize

    4KB

    Download

  • memory/1296-2-0x0000000000400000-0x000000000041A000-memory.dmp

    Filesize

    104KB

    Download