Overview

overview

7

Static

static

7

3f735dda9f...18.exe

windows7-x64

7

3f735dda9f...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    94s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/07/2024, 00:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    3f735dda9f0d4e4440dfebb09018bb4f_JaffaCakes118.exe

  • Size

    772KB

  • MD5

    3f735dda9f0d4e4440dfebb09018bb4f

  • SHA1

    c6d634b3ec1a0df9088eb0ba7969974169ccc50e

  • SHA256

    1d899bb0a6cb4bd014ba72d346cdc027cc2c79117fad84478ee0299ada1e2b30

  • SHA512

    479beae08bd7a77355bd0f19478582433b3fdbb5dbf631c0624f763bb49fcbff11f5496568480b8ee24bfe2f963cc745d8e3ca4598d181e9b20ee2cfba6e8f3e

  • SSDEEP

    12288:9iI38I3vQ9nIXoIz+B26j9mjj6SZZIeMVPURWLzogleFeBPf5fD0qMfAb:9BP/QBIXon26jsjj64VoLz1Maf5f/M

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Drops file in System32 directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3f735dda9f0d4e4440dfebb09018bb4f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3f735dda9f0d4e4440dfebb09018bb4f_JaffaCakes118.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:4392

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Windows\SysWOW64\PerfStringBackup.hjs
          Filesize

          2B

          MD5

          c51ce410c124a10e0db5e4b97fc2af39

          SHA1

          bd307a3ec329e10a2cff8fb87480823da114f8f4

          SHA256

          3fdba35f04dc8c462986c992bcf875546257113072a909c162f7e470e581e278

          SHA512

          413f2ba78c7ed4ccefbe0cc4f51d3eb5cb15f13fec999de4884be925076746663aa5d34476a3df4a8729fd8eea01defa4f3f66e99bf943f4d84382d64bbbfa9e

          Download Submit

        • memory/4392-0-0x0000000000400000-0x0000000000622000-memory.dmp

          Filesize

          2.1MB

          Download

        • memory/4392-1-0x0000000000400000-0x0000000000622000-memory.dmp

          Filesize

          2.1MB

          Download

        • memory/4392-26-0x0000000000400000-0x0000000000622000-memory.dmp

          Filesize

          2.1MB

          Download