Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
23-07-2024 11:19
General
-
Target
675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe
-
Size
790KB
-
MD5
675ee23b1db9e71238a5d2a1e9586099
-
SHA1
68805e1adea47d8b760404cbe0fe7c5c2c30dc90
-
SHA256
45cb81f1dcbd8d0874e43048479bc3bf133855984a569746ff42bae0904eb1ed
-
SHA512
a34c196405af233480fd550afc82d5b591653259013139d0a9783ddf77c0f718eb8d1893ce8c2878012fdea903fc8db6aa7342d780eeaaec24eed6bd8f54e41d
-
SSDEEP
12288:u8CDEETriahXaZpFBl/k0rSp0qihCNL02fQJeKQslyVplwAFIGX805QHO7HknIfs:ufxCiXa/7pg09z2fQJ6LRwAFIG3GSds
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
-
UPX packed file 17 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD5560d633189d5336c07f60f2af8ccdc26
SHA16122c228fdf2bce078567c10686e703941ba52cb
SHA256babafeccfad21a30612fc3479b07fbee039d8728a21b62c61a497822c6143a34
SHA5121801d7305eaf93d3cafe8a0071457f5e15a23f6df8cc84418995d92122ff43c4f99f52d1925133eb725e9b21ac4ce363c77d37ded5b74d2b04ab88790de992c0
-
Filesize
2KB
MD5a786e313a6bfaab7c40f9ecc9db31c45
SHA1270a36a85defbbb5d65ee5f81c3a4fd3953cee4a
SHA256c66d346eb27f82ed18bed79ada4667dc8c7b0147c9e2b65008297ccfdeed83ba
SHA512ee19c0ab22b293725a1c8d2fefe52ccdaeb9ed0b564ba359b66a75d2556997d8b1c9781b51ffa11f12af3cc3bea0ff9f2685dce98027e567b4b306ac357a8e03
-
Filesize
2KB
MD57f5adc7011c0be1584005f6ab2d41261
SHA168ca635d76413780f023275f0d042856130bbde7
SHA256e411dd57013b05d8f2e56a7e4ee2624a34dfe376cc3577bbe633b8d3ef70f5cf
SHA51282186939535726ecbecd7c7a5c329b296ca181a95a71065240b32e448fe7a886d19bf7896de8f543140e504404d507e703bcc451d76028f9305d3db9111a4263
-
Filesize
2KB
MD53b6ce2edb6e58a013476ed692cf1e80b
SHA16f628076fc0fc461536ef2df289336a9fffe33c9
SHA2560a25ac292b8fdf26fab43276a98b5da7432964cc713261bece332aedf4495bc9
SHA512c35c9bf02a5f436a7e3a96451263c6b261b041df45c3fb44a709d2d1c969850d961db77e207030f08c5b8600ffbd33193d9948b56bbf2de84b45a712101be401
-
Filesize
352KB
-
Filesize
352KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
352KB
-
Filesize
1.2MB
-
Filesize
312KB
-
Filesize
1.2MB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
312KB
-
Filesize
1.2MB
-
Filesize
280KB
-
Filesize
40KB
-
Filesize
1.2MB
-
Filesize
352KB
-
Filesize
40KB
-
Filesize
280KB
-
Filesize
352KB
-
Filesize
1.2MB
-
Filesize
352KB
-
Filesize
1.2MB