Analysis
-
max time kernel
142s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
23-07-2024 01:50
General
-
Target
65ae5dd2488ea1a236833192636f5ac6_JaffaCakes118.exe
-
Size
130KB
-
MD5
65ae5dd2488ea1a236833192636f5ac6
-
SHA1
f0a0eade223fedbe03af56907be04cfbebfae8a9
-
SHA256
91c25ef92a54566a142f7e554cfd8e16fd0fb5adc7bfa28f3a7c005ebb7aa895
-
SHA512
4ce730407d162bd0fe4a64d040a2c065f0eb8de79dc8ee2a3b11f7809242e7fa690b53f2fa2192dcdadd002974c481b66d66043abe6255ec1e1be9a221c320f9
-
SSDEEP
3072:jpDoYfZ9gXtnrUV6s5NoxL9vAybswLeVgUdQp4596dRa7Q8Q:jpDoYDWtnr26IaxvvU3796arQ
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\65ae5dd2488ea1a236833192636f5ac6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\65ae5dd2488ea1a236833192636f5ac6_JaffaCakes118.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x468 0x41c1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB