Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
20/07/2024, 03:46
General
-
Target
5ee8e3ab5f8cc44128c7116c357c5d6e_JaffaCakes118.exe
-
Size
383KB
-
MD5
5ee8e3ab5f8cc44128c7116c357c5d6e
-
SHA1
fdb68d856eb2b1698f3ac71e9e38557bf607f6b9
-
SHA256
18634542f222c339e59caada3a9b215c142710cc2be80a26d2b6ebe4af6bcfbe
-
SHA512
1af174d89ca1f1ed06d996ab2805827191cf50a8807af59bfb5a58d403bcfeea8177dfe714ac138741f425bc3c369d2611aca1a29774f5e128da643c8c919348
-
SSDEEP
6144:DF4DGh3n9QdRuwBURTJZQToihtupQIH5OQQYVvufr+R7vPZ1WkK:DFwYCaaW/sueIZOQQffaBu/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 7 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ee8e3ab5f8cc44128c7116c357c5d6e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5ee8e3ab5f8cc44128c7116c357c5d6e_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
86KB
MD5147127382e001f495d1842ee7a9e7912
SHA192d1ed56032183c75d4b57d7ce30b1c4ae11dc9b
SHA256edf679c02ea2e170e67ab20dfc18558e2bfb4ee5d59eceeaea4b1ad1a626c3cc
SHA51297f5ae90a1bbacfe39b9e0f2954c24f9896cc9dca9d14364c438862996f3bbc04a4aa515742fccb3679d222c1302f5bb40c7eaddd6b5859d2d6ef79490243a4d
-
Filesize
924KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
4KB
-
Filesize
244KB
-
Filesize
924KB