Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 09:07

General

  • Target

    c8888af63ce9d3e0d4ee3cd934aac0f9_JaffaCakes118.exe

  • Size

    28KB

  • MD5

    c8888af63ce9d3e0d4ee3cd934aac0f9

  • SHA1

    156fe24c366bc50683290784cf4cb3a99d523d0b

  • SHA256

    9b68314c8efcf3bb8399a654a5d16eefc9b6d29450b2366dafe7708124acdd01

  • SHA512

    0a6d39ad3f923cf8d3cdb991bea889490093a4ff8c3b32db10cfd6b9c0533b30ad629ddd8c784fbe94e14141e6330234ded5b66c6ff53a20de588e17814ed976

  • SSDEEP

    384:UmOyMLjKMPH1Dxw7ZA8l9ZoA7k+w9G5hmssR0IkR46nzojn8mgRRtssIeo/r5J1Q:hUjKVjl9xw3x6nz7vj1wrq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:1228
      • C:\Users\Admin\AppData\Local\Temp\c8888af63ce9d3e0d4ee3cd934aac0f9_JaffaCakes118.exe
        "C:\Users\Admin\AppData\Local\Temp\c8888af63ce9d3e0d4ee3cd934aac0f9_JaffaCakes118.exe"
        2⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:2692

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1228-2-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

            Filesize

            4KB

          • memory/1228-8-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

            Filesize

            24KB

          • memory/2692-1-0x0000000010000000-0x0000000010011000-memory.dmp

            Filesize

            68KB

          • memory/2692-0-0x0000000000400000-0x0000000000409000-memory.dmp

            Filesize

            36KB

          • memory/2692-20-0x0000000000400000-0x0000000000409000-memory.dmp

            Filesize

            36KB

          • memory/2692-21-0x0000000010000000-0x0000000010011000-memory.dmp

            Filesize

            68KB