Analysis
-
max time kernel
140s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11/09/2024, 18:11
General
-
Target
daf10ae2e43ce914cc245d7c5d848d27_JaffaCakes118.exe
-
Size
1.3MB
-
MD5
daf10ae2e43ce914cc245d7c5d848d27
-
SHA1
55c1390ad264f2bd67f282fd1237ec7a85063666
-
SHA256
22de01788da56d83893e21682441e83fdd282d205a395beaa6b98092be4aef40
-
SHA512
a69f004ba2cf2f855b1c79103469a5fa154a930eabb80a8553a9052cb0bfdb9d44f5a8ae21217f4713cec056b411a925e2a69144d1a0689178a23eb18c159aaf
-
SSDEEP
24576:F3M/UANrb3/+Yx0ObTF8DjHe/YR3Tcf8cmr1eUGoHT6t3+PZKt7Xke7zKzWiM4EJ:+/DNrb3/XxbbTFV/H8c+eUtHT6wPq7XL
Malware Config
Signatures
-
Loads dropped DLL 5 IoCs
-
UPX packed file 29 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 20 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\daf10ae2e43ce914cc245d7c5d848d27_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\daf10ae2e43ce914cc245d7c5d848d27_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256KB
MD5f34c58153766a46f29726f18ea61de84
SHA174a10a94d3713f2959271d3e759340b8b09b2903
SHA2566b0886e69b7543cd96569e259e97f501048c3c86ab8d168f1884d7f630cbfedb
SHA51264ea97a0b941d62fdb19f6a6eef4abbedf818525b920e09b0dad329344b96221a4452262dad4f48d89a5851d507df230a3c0cd49b211da0ea253b70ab968c8a0
-
Filesize
216KB
MD5cba933625bfa502fc4a1d9f34e1e4473
SHA15319194388c0e53321f99f1541b97af191999a09
SHA25625549c7781b3f1b92e73b0ea721d177207cce914a66f3229a71291f2eb160013
SHA512f5fb4b97c4f68a20e0847e6528740ce659c4501726f3b2dff1ac83e88a3b7198099da03edb0f069cd4af7ed568a2373597b235cd239895addfa5226d3a444142
-
Filesize
1.1MB
MD5638e737b2293cf7b1f14c0b4fb1f3289
SHA1f8e2223348433b992a8c42c4a7a9fb4b5c1158bc
SHA256baad4798c3ab24dec8f0ac3cde48e2fee2e2dffa60d2b2497cd295cd6319fd5b
SHA5124d714a0980238c49af10376ff26ec9e6415e7057925b32ec1c24780c3671047ac5b5670e46c1c6cf9f160519be8f37e1e57f05c30c6c4bda3b275b143aa0bf12
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
272KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
756KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
272KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
756KB