Analysis
-
max time kernel
140s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
10-07-2024 11:43
General
-
Target
3493ba72e025f5b6d332933b43bde1bb_JaffaCakes118.exe
-
Size
538KB
-
MD5
3493ba72e025f5b6d332933b43bde1bb
-
SHA1
6a5977df016c0c6d0878b9a5d138639b9f55d1f8
-
SHA256
bf155df1c7c996b465f2937aabe336e938d1e042ca721b7f2ed395935a339911
-
SHA512
f0b3043a6cd781fe0c6aa81f68fc9bded63184087f9686d279af5ae4f023ef4c7dc856fdc94489264261ac145814b95aee8e0cafb1424a56a888bfc7b01ec20f
-
SSDEEP
12288:MyvyRtE1gfMxJtQGbm2icG2TbNh58lUI5gtXmHpDmqABbvr/:MsyRtEaGvQcbalUIPpYBbvj
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 5 IoCs
-
Suspicious use of SendNotifyMessage 5 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3493ba72e025f5b6d332933b43bde1bb_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3493ba72e025f5b6d332933b43bde1bb_JaffaCakes118.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
MD5ec65d82622017795fcbd24c9f700c7f6
SHA1ca7fee811c6307a631084e45f2fbc438603369c3
SHA256e5e379d69f6510e8bf0d1bd3983d3a2305ccac74e8e2e64ddab525c1eef9306f
SHA5121b6430101c68593375fc0b2512fcf1b9991e2bd5f88cb3fcba251c24f38a10a7b99145b4c662dc0269556fc7aa19530d3046286c518fa2ef37c97bde2974a78a
-
Filesize
4KB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
4KB