Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 18:32 UTC

General

  • Target

    4ae3ec04c9bc3878fc1a961efa37f3c5_JaffaCakes118.exe

  • Size

    52KB

  • MD5

    4ae3ec04c9bc3878fc1a961efa37f3c5

  • SHA1

    a953535cc9cb89d8fc04da8bc0e0d4ef954c2d9c

  • SHA256

    e1fd6843b2894baef428384ac3962822e0607e275f8eb2690cb8d5534534070f

  • SHA512

    b7f623475b26adc3f868e4f69f445fd6c0e8ce57eb195d74f4d0e5ce80dbe5473e6f5a33df435a74bb23ffbc22c766c5d79a1f2ef584f02f356df96331397455

  • SSDEEP

    768:lNVlthGu65Wk/MXlgc/E7S1eq7Rgm7Q7I9ppqAAO9Ud3wknHq4OXxAiTDXr:lzltRfrM9qO/CmAA3NnonDX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: MapViewOfSection 2 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4ae3ec04c9bc3878fc1a961efa37f3c5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\4ae3ec04c9bc3878fc1a961efa37f3c5_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: MapViewOfSection
    • Suspicious behavior: RenamesItself
    PID:1176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1176-1-0x0000000000400000-0x0000000000410000-memory.dmp

    Filesize

    64KB

  • memory/1176-0-0x0000000000401000-0x000000000040E000-memory.dmp

    Filesize

    52KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.