Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
19/07/2024, 02:22
Static task
static1
Behavioral task
behavioral1
Sample
5a14566a17cfcb875ba691979dce5dfc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a14566a17cfcb875ba691979dce5dfc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a14566a17cfcb875ba691979dce5dfc_JaffaCakes118.exe
-
Size
148KB
-
MD5
5a14566a17cfcb875ba691979dce5dfc
-
SHA1
cb61ce6b3c3b3f192604e7d72ae172068cba6298
-
SHA256
dba0741ddcd64979c0be27db358791275814667f32b95268acf32035f29bc90b
-
SHA512
1f9433eb2a2e067bb5abd4b052f9ab992821f3cfac0bb7c658e7137974e2a67c08911db61167a46ffe1f2483b48f7f80103de03420c03601e9026cb4a792a749
-
SSDEEP
3072:T6LKSHmyX71EnZTWgvrhy7JbSfQzluByV7oSJ8fyDOhMLfQc:MZ771m0llzEoefyDOhifQc
Malware Config
Signatures
-
Drops file in Program Files directory 3 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Test\test.exe 5a14566a17cfcb875ba691979dce5dfc_JaffaCakes118.exe File created C:\Program Files (x86)\Test\test.exe 5a14566a17cfcb875ba691979dce5dfc_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Test\klog.dat 5a14566a17cfcb875ba691979dce5dfc_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2500 5a14566a17cfcb875ba691979dce5dfc_JaffaCakes118.exe Token: SeDebugPrivilege 2500 5a14566a17cfcb875ba691979dce5dfc_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2500 5a14566a17cfcb875ba691979dce5dfc_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5a14566a17cfcb875ba691979dce5dfc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5a14566a17cfcb875ba691979dce5dfc_JaffaCakes118.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2500
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD531d1ac40780d213e0e08d40a3e9d72aa
SHA15b73bb008703bc64544fe6efbd3622372f8c4a0c
SHA256993205498e08675bf82554ce47f648966a9fd0bbc2cbe98a2019e477d57728b5
SHA5129168d1a4069324f238411c4648e604c90a749a7851e593f370828db5734eeb1eebde5400a2bb00d1afe776484ffd2ed99c6ba13f33f2419923b119595bf5c517