Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19-07-2024 00:16

General

  • Target

    59b13d3fd5b85fc602a85333ca57721e_JaffaCakes118.exe

  • Size

    684KB

  • MD5

    59b13d3fd5b85fc602a85333ca57721e

  • SHA1

    c23fa8301bd0c524c9d86f50f98af106c0a50b7c

  • SHA256

    86d8c3b6ee423e0f18d9daec02d0c2b7de417b3a8eb8118fa7fe5e790eb8865a

  • SHA512

    6d7bb2aba740310b014537f0020e9704d552f426d30726e57970d758f16c051684c62d557474217e79088901ee0eef21bf58dc932357d635473f2b4c41f5887e

  • SSDEEP

    12288:ZmA//BGbMzIHYiCbVA//KWkORS0JwC0tSq0j9jnkwNk9OC+TicqjeKb3WLT7Cf:ZmA//BQO4Y9CCWkJ0JwC0kqadfTPLT

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\59b13d3fd5b85fc602a85333ca57721e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\59b13d3fd5b85fc602a85333ca57721e_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2672-0-0x0000000000400000-0x0000000000620000-memory.dmp

    Filesize

    2.1MB

  • memory/2672-1-0x0000000000400000-0x0000000000620000-memory.dmp

    Filesize

    2.1MB

  • memory/2672-3-0x0000000000400000-0x0000000000620000-memory.dmp

    Filesize

    2.1MB