Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
11/07/2024, 10:07
General
-
Target
38af9dca5c92783e8aa4188eba248eef_JaffaCakes118.exe
-
Size
260KB
-
MD5
38af9dca5c92783e8aa4188eba248eef
-
SHA1
4fc846ffbd05cfba4813c5aad8038d5c8bb87653
-
SHA256
99d6c52912fe45d6793cb2b81256a7520677a1d439ba2572be280ddfd4a6ae4f
-
SHA512
b5d7b496be9974a2cd879534d4e48b52d8dd38405aea6dad2aad048bb90928557cdf0006bca3ebf5653c39f26feb5c16835329dff787a668c87e46ee4b6896bf
-
SSDEEP
6144:fDNwt3C065qJ9n0W+/5GN0en0a2lmG4vJ1rQyWNhCcG/:fA50Wi55e0blkRqyYhCcm
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 7 IoCs
-
Suspicious use of SendNotifyMessage 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\38af9dca5c92783e8aa4188eba248eef_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\38af9dca5c92783e8aa4188eba248eef_JaffaCakes118.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
740KB
-
Filesize
4KB
-
Filesize
740KB
-
Filesize
4KB