660d68ee092d2778b0e979e0c7931c7ac7c074d2ed676ef1b53d6912a788a365

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08/07/2024, 05:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
Size

6.5MB
MD5

2b2b4eae993704fd355b1b3663674b9e
SHA1

b201920219f53c7d8840e79180b499f9af671170
SHA256

660d68ee092d2778b0e979e0c7931c7ac7c074d2ed676ef1b53d6912a788a365
SHA512

cfeea5fae3cbbaeb5308346e16614c5b2cfac5cc6ac851f3894a92da58693f8281c2f6c74f7a0fcd78de8a4039c2d31c3c385e2e4d03ffb80d1a8bcee2f94959
SSDEEP

196608:no+gp1DM9onJ5hrZER9xQ3jo4UR7+pCL6S:YpNM9c5hlER9xA2RSpC

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 15 IoCs

pid	Process
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
4884	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4732 wrote to memory of 4884	4732	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe	83
PID 4732 wrote to memory of 4884	4732	2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe	83

C:\Users\Admin\AppData\Local\Temp\2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4732
- C:\Users\Admin\AppData\Local\Temp\2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\2b2b4eae993704fd355b1b3663674b9e_JaffaCakes118.exe"
  2⤵
  - Loads dropped DLL
  PID:4884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI47322\VCRUNTIME140.dll

Filesize
91KB

MD5
7942be5474a095f673582997ae3054f1

SHA1
e982f6ebc74d31153ba9738741a7eec03a9fa5e8

SHA256
8ee6b49830436ff3bec9ba89213395427b5535813930489f118721fd3d2d942c

SHA512
49fbc9d441362b65a8d78b73d4fdcf988f22d38a35a36a233fcd54e99e95e29b804be7eabe2b174188c7860ebb34f701e13ed216f954886a285bed7127619039

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\_asyncio.pyd

Filesize
63KB

MD5
7493f806acd8a867d90375362f8eed87

SHA1
d82ec9650a7fee1955078c42d7286f9d2b0026ff

SHA256
d1f458227ecf60d389145175fa0b61656ecac2fb80d9bb89e04cdf273e67c543

SHA512
e1139da5b0cdbebfc33e90c7617cc57e676c90e3d00236aaefc1aafa1c0247812b4ef2b605943810f41ebada5da7f2f24c998a8e07687cb1a3c89aa88e3ac7cc

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\_bz2.pyd

Filesize
84KB

MD5
499462206034b6ab7d18cc208a5b67e3

SHA1
1cd350a9f5d048d337475e66dcc0b9fab6aebf78

SHA256
6c2bbed242c399c4bc9b33268afe538cf1dea494c75c8d0db786030a0dcc4b7e

SHA512
17a1191f1d5ca00562b80eff2363b22869f7606a2a17f2f0b361d9b36b6e88cb43814255a5bac49d044ea7046b872bac63bd524f9442c9839ab80a54d96f1e6b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\_ctypes.pyd

Filesize
123KB

MD5
b74f6285a790ffd7e9ec26e3ab4ca8df

SHA1
7e023c1e4f12e8e577e46da756657fd2db80b5e8

SHA256
c1e3e9548243ca523f1941990477723f57a1052965fccc8f10c2cfae414a6b8a

SHA512
3a700638959cbd88e8a36291af954c7ccf00f6101287fc8bd3221ee31bd91b7bd1830c7847d8c2f4f07c94bc233be32a466b915283d3d2c66abed2c70570c299

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\_hashlib.pyd

Filesize
64KB

MD5
60f420a9a606e2c95168d25d2c1ac12e

SHA1
1e77cf7de26ed75208d31751fe61da5eddbbaf12

SHA256
8aa7abe0a92a89adf821e4eb783ad254a19858e62d99f80eb5872d81e8b3541c

SHA512
aaf768176cf034004a6d13370b11f0e4bbf86b9b76de7fa06d0939e98915607d504e076ad8adb1a0ebfb6fd021c51764a772f8af6af7f6d15b0d376448aba1a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\_lzma.pyd

Filesize
158KB

MD5
bc118fb4e14de484452bb1be413c082a

SHA1
25d09b7fbc2452457bcf7025c3498947bc96c2d1

SHA256
ac0ceb8e6b5e67525b136b5ce97500fe4f152061b1bf2783f127eff557b248a3

SHA512
68a24d137b8641cd474180971142511d8708738096d865a73fb928315dd9edf46c4ebf97d596f4a9e207ec81828e5db7e90c7b8b00d5f416737ba8bffc2887bf

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\_overlapped.pyd

Filesize
45KB

MD5
e648ac1da13b47cd757b8ca5392e1e28

SHA1
1a16400c188a90b7d019364b3864d044155ab7b2

SHA256
c67bf0303c504f3605a6d4c396a1e30e35b64d1a1e39dd36943d8cc7f69a6097

SHA512
717f258d5a791359195856b9507dc7ca1403f424964490484fc9ffbcf42de451251764441cd5e4e9dd6b9bf51f6b035e79f1110c6ac5a8d0bae3d4589084846f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\_socket.pyd

Filesize
78KB

MD5
0df2287791c20a764e6641029a882f09

SHA1
8a0aeb4b4d8410d837469339244997c745c9640c

SHA256
09ab789238120df329956278f68a683210692c9bcccb8cd548c771e7f9711869

SHA512
60c24e38ba5d87f9456157e3f4501f4ffabce263105ff07aa611b2f35c3269ade458dbf857633c73c65660e0c37aee884b1c844b51a05ced6aed0c5d500006de

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\_ssl.pyd

Filesize
150KB

MD5
66172f2e3a46d2a0f04204d8f83c2b1e

SHA1
e74fee81b719effc003564edb6b50973f7df9364

SHA256
2b16154826a417c41cda72190b0cbcf0c05c6e6fe44bf06e680a407138402c01

SHA512
123b5858659b8a0ac1c0d43c24fbb9114721d86a2e06be3521ad0ed44b2e116546b7b6332fd2291d692d031ec598e865f476291d3f8f44131aacc8e7cf19f283

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\base_library.zip

Filesize
767KB

MD5
95eec7f1ee6a68d7903cf5b3956c6753

SHA1
de91aaa667e64806523bccfb8fd2a955e0842097

SHA256
951b7104bee099258d393b39324e1e4ce2e7380d60e0d476a07d15483cd19be5

SHA512
867f29624e7ca63327d1c5159cd9293d5faf195f322de86e01ce729c6bfc984cbb9143b19075519f011bcd58b22aa6da1af0a340b4190e5e508ed800cc1a966e

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\libcrypto-1_1.dll

Filesize
3.2MB

MD5
cc4cbf715966cdcad95a1e6c95592b3d

SHA1
d5873fea9c084bcc753d1c93b2d0716257bea7c3

SHA256
594303e2ce6a4a02439054c84592791bf4ab0b7c12e9bbdb4b040e27251521f1

SHA512
3b5af9fbbc915d172648c2b0b513b5d2151f940ccf54c23148cd303e6660395f180981b148202bef76f5209acc53b8953b1cb067546f90389a6aa300c1fbe477

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\libffi-7.dll

Filesize
32KB

MD5
eef7981412be8ea459064d3090f4b3aa

SHA1
c60da4830ce27afc234b3c3014c583f7f0a5a925

SHA256
f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081

SHA512
dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\libssl-1_1.dll

Filesize
673KB

MD5
bc778f33480148efa5d62b2ec85aaa7d

SHA1
b1ec87cbd8bc4398c6ebb26549961c8aab53d855

SHA256
9d4cf1c03629f92662fc8d7e3f1094a7fc93cb41634994464b853df8036af843

SHA512
80c1dd9d0179e6cc5f33eb62d05576a350af78b5170bfdf2ecda16f1d8c3c2d0e991a5534a113361ae62079fb165fff2344efd1b43031f1a7bfda696552ee173

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\python39.dll

Filesize
4.2MB

MD5
c4b75218b11808db4a04255574b2eb33

SHA1
f4a3497fb6972037fb271cfdc5b404a4b28ccf07

SHA256
53f27444e1e18cc39bdb733d19111e392769e428b518c0fc0839965b5a5727a2

SHA512
0b7ddbe6476cc230c7bdd96b5756dfb85ab769294461d1132f0411502521a2197c0f27c687df88a2cd1ab53332eaa30f17fa65f93dac3f5e56ed2b537232e69c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI47322\select.pyd

Filesize
27KB

MD5
a2a4cf664570944ccc691acf47076eeb

SHA1
918a953817fff228dbd0bdf784ed6510314f4dd9

SHA256
b26b6631d433af5d63b8e7cda221b578e7236c8b34b3cffcf7630f2e83fc8434

SHA512
d022da9e2606c5c3875c21ba8e1132ad8b830411d6ec9c4ddf8ebd33798c44a7e9fe64793b8efb72f3e220bb5ce1512769a0398ecc109f53f394ea47da7a8767

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads