Analysis
-
max time kernel
10s -
max time network
14s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
10/07/2024, 08:22
Errors
Reason
Machine shutdown
General
-
Target
33f5a29b867c0109ffbdcdf73939f456_JaffaCakes118.exe
-
Size
11KB
-
MD5
33f5a29b867c0109ffbdcdf73939f456
-
SHA1
a31fbafec5a2c1d983f222a96181fbeeb849769b
-
SHA256
0dd21104a5df83d6f67254a1fbe424dc3df87d471dc18c7058ae61aac6366f32
-
SHA512
d0ef169a829e8a39d249121314f8c9abc191832b55af030911a6a194233aba9123de90483ab65467bba572fdbb49147353688f9a3dd54af7688b15bdbc495800
-
SSDEEP
192:cVlzbEBolupZD4Ae+xd7wwmXCn/DdNr80e+7NFaNJhLkwcud2DH9VwGfctIItP:c3uZw+X7wRX07dy0F7aNJawcudoD7Uf
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\33f5a29b867c0109ffbdcdf73939f456_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\33f5a29b867c0109ffbdcdf73939f456_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x01⤵
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
4KB