Analysis

  • max time kernel
    14s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19-07-2024 05:14

General

  • Target

    5a99727b91806c5e62ac7940ed116421_JaffaCakes118.exe

  • Size

    317KB

  • MD5

    5a99727b91806c5e62ac7940ed116421

  • SHA1

    eb0011391f91ed1ad9d20014b76a5dda75645a55

  • SHA256

    9a47f0bc647790e67c7861ebef7c70ae39453528f1f4cd4ebee547f4c264761c

  • SHA512

    26a72de7e92143fda2d6576c15f9c25ff469dd568ba684d8b872be0558544cea9abfe11b623308ccded4181ca9a870b0a3b0c2c99098ada5d55770adece3de49

  • SSDEEP

    6144:kKfnBpI5cXYr4rRiDHUchAA+dziQaT3ZqHzfGwe3RR8ZBMLGlNKhtyh74Zq:kQHI5yrR0FtQbatqTwMmQKe1

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5a99727b91806c5e62ac7940ed116421_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5a99727b91806c5e62ac7940ed116421_JaffaCakes118.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2452-5-0x0000000000400000-0x00000000004ED000-memory.dmp

    Filesize

    948KB

  • memory/2452-4-0x0000000000401000-0x0000000000475000-memory.dmp

    Filesize

    464KB

  • memory/2452-3-0x0000000000400000-0x00000000004ED000-memory.dmp

    Filesize

    948KB

  • memory/2452-0-0x0000000000400000-0x00000000004ED000-memory.dmp

    Filesize

    948KB

  • memory/2452-6-0x0000000000400000-0x00000000004ED000-memory.dmp

    Filesize

    948KB