Analysis

  • max time kernel
    140s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    29-08-2024 10:01

General

  • Target

    c89b8437ce30924abd02fa6813b195f3_JaffaCakes118.exe

  • Size

    3.5MB

  • MD5

    c89b8437ce30924abd02fa6813b195f3

  • SHA1

    d9178cd9ce2e04f45fd893f69c1c64bfb1061b37

  • SHA256

    401e11ce7abb1792c3795d41d067b93df7b09ba6eedadecdd0b84b585dfe35eb

  • SHA512

    04d4cceadedce01a18ec833d73dd3880eba2bc67599a182e08012d32d06f8faeb9b5fc630c5b9eb3b596c21899587ea6eff8109ada77c64d66194250152f246b

  • SSDEEP

    98304:47GaYJriRsR3dh5eAxID5F54anh1lqKjCqtg2bTxRPSn:47GVJwmh5DTan/4KjCSTTxtSn

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c89b8437ce30924abd02fa6813b195f3_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\c89b8437ce30924abd02fa6813b195f3_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2412-0-0x0000000000400000-0x00000000004CA000-memory.dmp

    Filesize

    808KB

  • memory/2412-4-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2412-3-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2412-2-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2412-1-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2412-5-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2412-18-0x000000007ECE0000-0x000000007ED1D000-memory.dmp

    Filesize

    244KB

  • memory/2412-16-0x000000007ECE0000-0x000000007ED1D000-memory.dmp

    Filesize

    244KB

  • memory/2412-14-0x000000007ECE0000-0x000000007ED1D000-memory.dmp

    Filesize

    244KB

  • memory/2412-12-0x000000007ECE0000-0x000000007ED1D000-memory.dmp

    Filesize

    244KB

  • memory/2412-10-0x000000007ECE0000-0x000000007ED1D000-memory.dmp

    Filesize

    244KB

  • memory/2412-9-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2412-8-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2412-7-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2412-6-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2412-19-0x000000006A9D0000-0x000000006AB24000-memory.dmp

    Filesize

    1.3MB

  • memory/2412-21-0x000000006A9D0000-0x000000006AB24000-memory.dmp

    Filesize

    1.3MB

  • memory/2412-25-0x000000006A9D0000-0x000000006AB24000-memory.dmp

    Filesize

    1.3MB

  • memory/2412-23-0x000000006A9D0000-0x000000006AB24000-memory.dmp

    Filesize

    1.3MB

  • memory/2412-39-0x000000006A9D0000-0x000000006AB24000-memory.dmp

    Filesize

    1.3MB

  • memory/2412-37-0x0000000065340000-0x00000000653D2000-memory.dmp

    Filesize

    584KB

  • memory/2412-41-0x000000006A9D0000-0x000000006AB24000-memory.dmp

    Filesize

    1.3MB

  • memory/2412-35-0x0000000065340000-0x00000000653D2000-memory.dmp

    Filesize

    584KB

  • memory/2412-33-0x0000000065340000-0x00000000653D2000-memory.dmp

    Filesize

    584KB

  • memory/2412-31-0x0000000065340000-0x00000000653D2000-memory.dmp

    Filesize

    584KB

  • memory/2412-29-0x0000000065340000-0x00000000653D2000-memory.dmp

    Filesize

    584KB

  • memory/2412-27-0x000000006A9D0000-0x000000006AB24000-memory.dmp

    Filesize

    1.3MB

  • memory/2412-46-0x0000000000400000-0x00000000004CA000-memory.dmp

    Filesize

    808KB

  • memory/2412-45-0x0000000000400000-0x00000000004CA000-memory.dmp

    Filesize

    808KB

  • memory/2412-44-0x0000000000401000-0x0000000000402000-memory.dmp

    Filesize

    4KB

  • memory/2412-50-0x0000000010000000-0x0000000010030000-memory.dmp

    Filesize

    192KB

  • memory/2412-52-0x0000000010000000-0x0000000010030000-memory.dmp

    Filesize

    192KB

  • memory/2412-60-0x0000000010000000-0x0000000010030000-memory.dmp

    Filesize

    192KB

  • memory/2412-62-0x0000000010000000-0x0000000010030000-memory.dmp

    Filesize

    192KB

  • memory/2412-58-0x0000000010000000-0x0000000010030000-memory.dmp

    Filesize

    192KB

  • memory/2412-56-0x0000000010000000-0x0000000010030000-memory.dmp

    Filesize

    192KB

  • memory/2412-54-0x0000000010000000-0x0000000010030000-memory.dmp

    Filesize

    192KB

  • memory/2412-117-0x0000000000400000-0x00000000004CA000-memory.dmp

    Filesize

    808KB

  • memory/2412-118-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2412-119-0x000000007ECE0000-0x000000007ED1D000-memory.dmp

    Filesize

    244KB

  • memory/2412-120-0x000000006A9D0000-0x000000006AB24000-memory.dmp

    Filesize

    1.3MB