Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
19-07-2024 18:41
General
-
Target
5d303f6e2cd19b6931abb145bc02a939_JaffaCakes118.exe
-
Size
486KB
-
MD5
5d303f6e2cd19b6931abb145bc02a939
-
SHA1
7136c3dbcc36f1ea1f610c9973a0e1cdc90a1544
-
SHA256
22dfc7d2583fb5a70dfcb26e751336f26c4fdfc7632fb8c02f351f8f07ef55ad
-
SHA512
fb607ead83517935249512e384cb5d273b0366446157fc6c78561eb08e40cec9d101e33d0b6de387f03f5dc18a897c7a99f706c7a5370359dc9586406e8d4cc6
-
SSDEEP
6144:yS5yI7Tw9s5ovJNAa1aXK2EFrUCGvRWZzwXxS33T+WK4y/ae+RSm:ymTw92oQArm8TvK4y/aX
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 2 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5d303f6e2cd19b6931abb145bc02a939_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5d303f6e2cd19b6931abb145bc02a939_JaffaCakes118.exe"1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of UnmapMainImage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
492KB
-
Filesize
4KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
220KB