Analysis
-
max time kernel
117s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
09-07-2024 07:58
General
-
Target
2f8cf99a8063541e88011b1c03348484_JaffaCakes118.exe
-
Size
56KB
-
MD5
2f8cf99a8063541e88011b1c03348484
-
SHA1
da036ea0034c90f5c0af5b6be8e7baddf356c2fd
-
SHA256
d69d77e81ad1e59492b6bd80743617811f3e5d890e42c69e33b2268189ba8df4
-
SHA512
1a2c9740be5e8d81094a7cd905fe56aa2260b62b955edd0d36381d7bc33feb1c6ab26d972cd1f8d91bfe4b12e677008ff05101007e165b007670c27c6091c4fb
-
SSDEEP
768:lTbifEMiqzyhafOffN6zNLGn3YGM04x/OyPGoPB5SW/0AtT4hocmOl/EJQDbpm0o:5LdPaGffkSW0MmdK+W/Co2kQDbM46D2
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2f8cf99a8063541e88011b1c03348484_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2f8cf99a8063541e88011b1c03348484_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2f8cf99a8063541e88011b1c03348484_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\2f8cf99a8063541e88011b1c03348484_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD55ad6e7ae01c29484ea76f665652a1920
SHA15381ef6ff0d210e7d4a47f347fb733aca77db471
SHA2561a6379c24fbba3dca9ce66dc62297649fae80abeb4898081ca305141271ecf21
SHA51203005ae759c22696ef44044f4b21934fcd27511a6c35dd78b9d5115603fc1404e995ee0939c913b8947afca6f7529828a326178208dd171e7a1889ef30589e5b
-
Filesize
232KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
232KB