Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
21-08-2024 04:00
General
-
Target
b206f9ba56029cdd85df4f40fa1bdd10_JaffaCakes118.exe
-
Size
228KB
-
MD5
b206f9ba56029cdd85df4f40fa1bdd10
-
SHA1
ab38684b40374be6d2904d58c0486f39b5d0b9e8
-
SHA256
36072a06f0dae55329f3019c1a6cd192717fe87b24afb0f5427f672d5ec8a76d
-
SHA512
14acd247302d48f14a80ae7b36eb95f801edb2e7f73bdcbf57c4f3deff96c1946ed29c4548b824b86c89f916dd51bd0900c5b107affc144c9bd6e49d8b101820
-
SSDEEP
6144:E0oJtN1nTLADZHznAIeQrqavTlGsuamlJSktV8IiFTq:E73Pn4dHUIeOvhp89V8DFTq
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 7 IoCs
-
Suspicious use of SendNotifyMessage 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b206f9ba56029cdd85df4f40fa1bdd10_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b206f9ba56029cdd85df4f40fa1bdd10_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
648KB
-
Filesize
4KB
-
Filesize
648KB
-
Filesize
4KB