Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
19/08/2024, 18:44
General
-
Target
ac2545410f467c1b908b5ce4531deca5_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
ac2545410f467c1b908b5ce4531deca5
-
SHA1
573f3b7db552cfc72041f5f2c7023da18a8ecfbf
-
SHA256
0dd6b74a0b3626fdcc4a15ded7bae6f86116cc68fec9a5bd9c624a43ac1949db
-
SHA512
760f3a6cb35ddac9b9dd8ec09038851063859382762ae06470b74775cea84eca33d797d3d7f3d061f1b53aa8afc795fe910d04fe97977f199e6f6ff3f102db8b
-
SSDEEP
24576:j2Lz+2WsNRujNeRlWf7m13N7VHLe6m/JdBAeQUD5o28s6totxD6O16Tz:uzGIRjlF7xLroaQq/otxtCz
Score
7/10
Malware Config
Signatures
-
Themida packer 1 IoCs
Detects Themida, an advanced Windows software protection system.
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\ac2545410f467c1b908b5ce4531deca5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ac2545410f467c1b908b5ce4531deca5_JaffaCakes118.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
24KB
-
Filesize
4KB
-
Filesize
880KB
-
Filesize
8KB
-
Filesize
28KB
-
Filesize
2.3MB