Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    09-07-2024 08:56

General

  • Target

    2fbaa304b324291fb0356d5276b52db7_JaffaCakes118.exe

  • Size

    148KB

  • MD5

    2fbaa304b324291fb0356d5276b52db7

  • SHA1

    5c7a91bfc15d43cf320f548423ee552aa38be449

  • SHA256

    33a04d286c1ec2d819129d40ae967929196bcc636731c3ec42bf1f376a388db5

  • SHA512

    e7a517944fdcb6d1c501b248fd527b0994a01e9bb89e9a41b873e0ad27bac9efb3a71d8ab4c6a8fbd54751f88e52f8e7d49eb55a280c798a03ec8a7700c5265f

  • SSDEEP

    1536:/TfZWATm15LwkGexsP3MxRlQUMHTipVfBo7WRl8+QzH9cT0E2Cm:/TfYzvLwkGSu87lQUFBBo7akcP

Score
10/10

Malware Config

Signatures

  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2fbaa304b324291fb0356d5276b52db7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2fbaa304b324291fb0356d5276b52db7_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2968-2-0x0000000000250000-0x000000000026D000-memory.dmp

    Filesize

    116KB