Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
12-07-2024 12:31
General
-
Target
3d63cb5bdc15d76c11d889314c48722e_JaffaCakes118.exe
-
Size
17KB
-
MD5
3d63cb5bdc15d76c11d889314c48722e
-
SHA1
d83c42de776bdf1c833256d0276c7968d422eaa4
-
SHA256
d19bd1065e188e5bb49fd4741976943464c8a22daaed28219ce88b6dc02b0c48
-
SHA512
146c8d18e78d9efaf9c0001367ee9b1926242e234bbb356f9886e0954486429e2685915cc11268eac52f161ecfce0b2d4750faa7d7db905a4b01d484133cc833
-
SSDEEP
384:pEKZOw/XDfm8KPJLE1w8NWx3TCXLtkWb6zuooHzYzKrUV3pBY:1I+rjKPJE5s32XLtTTxUVX
Score
7/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3d63cb5bdc15d76c11d889314c48722e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d63cb5bdc15d76c11d889314c48722e_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3768 -s 3122⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3768 -ip 37681⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
44KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
44KB