Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
10/07/2024, 12:16
General
-
Target
34ae63fe7842de42d522dc69cdcf94f5_JaffaCakes118.exe
-
Size
356KB
-
MD5
34ae63fe7842de42d522dc69cdcf94f5
-
SHA1
229a41529defced2ee824d3f8d4fe6453762c22a
-
SHA256
ea64090d5810dafc106e55588581fd2320ebdde3120ad04291c48227bea2ccdd
-
SHA512
307545c7bc892cf4b2fdea59f9c38caf82a52d2ffd88e0fe72f20544f9de5930d2c414cf7636c1cfc9e3c65ef3540a377ef6616e93aa21404955e789d442f929
-
SSDEEP
6144:6Qw0WAtKvhICR0U6C6XxfmVD4VQolwF/qBDZ3+C/V73frYG8C1Ncys5:Lw0WAtKZPeRONiwF2Z3+WuCMZ
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\34ae63fe7842de42d522dc69cdcf94f5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\34ae63fe7842de42d522dc69cdcf94f5_JaffaCakes118.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
880KB
-
Filesize
4KB
-
Filesize
880KB
-
Filesize
4KB