Overview

overview

3

Static

static

3

344e187f6b...18.exe

windows7-x64

1

344e187f6b...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 10:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    344e187f6b61208faeba52f4c0f762b2_JaffaCakes118.exe

  • Size

    120KB

  • MD5

    344e187f6b61208faeba52f4c0f762b2

  • SHA1

    f6e7530b65a66844e8efefe878de07eff37bd0ce

  • SHA256

    96d4cf8a11c5e007e7f33208bbcf7524fb2eb75bde9ef70566374aa16557f4f7

  • SHA512

    865821473fdd1a82e0918879ac72204c1853ef8a8bb9fbff0de57debbcab43747b9efc2e1603a84fe0d6af289a98b7dccbe56d83fc4927bf8672a2cab4781053

  • SSDEEP

    768:CATmq+Q6ewHCJTonu0GmpIyg3aM9+E5yv7+ZK5vuHjTGWlTUJ9Lx3X9YMe0/1ISW:Pmq+QPiNGIAH+vu3VIrH93e0/1ISZbs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\344e187f6b61208faeba52f4c0f762b2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\344e187f6b61208faeba52f4c0f762b2_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2624-0-0x0000000013140000-0x000000001315E000-memory.dmp

    Filesize

    120KB

    Download

  • memory/2624-1-0x0000000013140000-0x000000001315E000-memory.dmp

    Filesize

    120KB

    Download