Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
14-07-2024 09:33
General
-
Target
453f9d1b0afd3756f34e99e90570b9fc_JaffaCakes118.exe
-
Size
22KB
-
MD5
453f9d1b0afd3756f34e99e90570b9fc
-
SHA1
0115ba3b989d1c1158fe9f7ebbe36e531731da9c
-
SHA256
e21a56ba90f1dc42bae8ec0527d3131871203899624af167531a72ac6f58f8d7
-
SHA512
31b5480d42223d84121886c35130777903d5c86ac38921409ae305a5c3e5dfadb5d442c8cfb9633ab3fcdec7045842aced108a57ac850bd6d03b78d674fa5e52
-
SSDEEP
384:JdUq5ySG3iXRBWZ/w01bcpiUiiqJMm/r4onWmwKLOmpHOtZIDbVZ3bERpH7:PW0WZo0pUqMir9dSmUtZIfbmh
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\453f9d1b0afd3756f34e99e90570b9fc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\453f9d1b0afd3756f34e99e90570b9fc_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
18KB
MD5173406dd1557072e95c459071ed8d4ad
SHA132676fb5dcbd273f45e601a5db4b555eba5221ff
SHA256ac60426f803746b7db050e76b18bd5704f26c01e4a9b7ffbbca6f870e0f5a3f2
SHA512c4e1715702dd47c7478ba8f0baed7815d369faa07465ea2b74b722d2e7b76ac14221099a4eca5ceb4366a6385842988b7adcac1db42a0f87895b8fb66b6b1b51
-
Filesize
104KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
104KB