Overview

overview

3

Static

static

3

6721f6ee0a...18.exe

windows7-x64

1

6721f6ee0a...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    16s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    23-07-2024 10:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6721f6ee0a421482ba8c21ff6ea09571_JaffaCakes118.exe

  • Size

    208KB

  • MD5

    6721f6ee0a421482ba8c21ff6ea09571

  • SHA1

    d72111a083637ad387de25d184b4cf649ba76bec

  • SHA256

    e3b747c141bf983d2d719bf2c690fc08cb08a96b6154b337559738ab18d3ebe6

  • SHA512

    743696f76a582f51d12ad05763cf65f6be5c3d159f3fb79510c7167ec802628e5bd9326fca9805c2e5172a7a0fa529f222f1348a9b768cd433b4a0a88c2d1162

  • SSDEEP

    3072:zwzgDD0mXq6sJ+TNwguhdfr02HpPAo6/TDv8Az3HfWIy+d9BMRZ:LgBSNwgcdf9ZAZZ3Hu8dbM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of UnmapMainImage 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:1200
      • C:\Users\Admin\AppData\Local\Temp\6721f6ee0a421482ba8c21ff6ea09571_JaffaCakes118.exe
        "C:\Users\Admin\AppData\Local\Temp\6721f6ee0a421482ba8c21ff6ea09571_JaffaCakes118.exe"
        2⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of UnmapMainImage
        • Suspicious use of WriteProcessMemory
        PID:1540

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1540-1-0x0000000000400000-0x000000000041D000-memory.dmp

      Filesize

      116KB

      Download

    • memory/1540-0-0x00000000003D0000-0x00000000003F3000-memory.dmp

      Filesize

      140KB

      Download

    • memory/1540-2-0x0000000000400000-0x000000000041D000-memory.dmp

      Filesize

      116KB

      Download