Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
21-07-2024 20:52
Static task
static1
Behavioral task
behavioral1
Sample
615a8587511f9f38d507c9dc582e768a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
615a8587511f9f38d507c9dc582e768a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
615a8587511f9f38d507c9dc582e768a_JaffaCakes118.exe
-
Size
99KB
-
MD5
615a8587511f9f38d507c9dc582e768a
-
SHA1
e5f8a5aceb529b07efce28428fe4de2577d91cba
-
SHA256
0c02cceb771796cf8b0e1b089d5373c5710a20a876a6dfe241de95352198f92f
-
SHA512
c9ba9a6310fd3f2e5e56215bb4d6b0cd4970a5ea5548e599db3e0a6feeb6b33adf9446439cd98e6fe1db8f0d09b663fb279e501091c9d96b8d8039c87b0f1bb6
-
SSDEEP
1536:dOKzyqNQuJiYjTX5RzPO4HE76U82LQ0SzipMqML+Liltjx+sqv8ajCqldVu:EKzyqN11D5RzPO4HE7N8CSieLx1aGqrM
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 4428 615a8587511f9f38d507c9dc582e768a_JaffaCakes118.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\vcmgcd32.dll 615a8587511f9f38d507c9dc582e768a_JaffaCakes118.exe File created C:\Windows\SysWOW64\vcmgcd32.dl_ 615a8587511f9f38d507c9dc582e768a_JaffaCakes118.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SYSTEM.INI 615a8587511f9f38d507c9dc582e768a_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4428 615a8587511f9f38d507c9dc582e768a_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\615a8587511f9f38d507c9dc582e768a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\615a8587511f9f38d507c9dc582e768a_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
PID:4428
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
MD5ae22ca9f11ade8e362254b452cc07f78
SHA14b3cb548c547d3be76e571e0579a609969b05975
SHA25620cbcc9d1e6bd3c7ccacbe81fd26551b2ccfc02c00e8f948b9e9016c8b401db6
SHA5129e1c725758a284ec9132f393a0b27b019a7dde32dc0649b468152876b1c77b195abc9689b732144d8c5b4d0b5fcb960a3074264cab75e6681932d3da2a644bc1