Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
09-07-2024 22:32
General
-
Target
323d7cf95896cf9208438300ceff0ad5_JaffaCakes118.exe
-
Size
17KB
-
MD5
323d7cf95896cf9208438300ceff0ad5
-
SHA1
f21f351bcfeb7a4712bdb1c71ac93208aa6fc53e
-
SHA256
a8dc9e244daacbe1fcdedf7b9af632cebcee794d1110aab7088ac180520e2e3c
-
SHA512
90cf7c030d5accf00eb3193cd770821d4ef352e44d897c54f277860f1ffcf4ebef0718f44b75289ba90bfd690dbb8ddef1c64c184aad8d4d1ad6e5f725215bbb
-
SSDEEP
384:fFAAaE9yUVrZ6DZnmRFtkO2TZyJaHqTSIWUEeb65rC1k:fF/9JVrZ6NswO2FyJ2qTfWUxo
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\323d7cf95896cf9208438300ceff0ad5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\323d7cf95896cf9208438300ceff0ad5_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13KB
MD5d25184f6b511d0ae43a8f60844bcef89
SHA132b416c129a108a4490be3ef327e38cd6e314918
SHA2569b1738ccb0e82ad6be7e07011708f957f70694dac9272dabf3b9d6fcc5920a1a
SHA512af0f9a016e23f866a78568056544b2b246ac9003ba93b9e9548305072e137f3e2409e89918360f74c418183ac621d4f8e17a4deb3f112a24e0b4a0c91af33a8e
-
Filesize
76KB
-
Filesize
76KB