Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27-09-2024 23:03

General

  • Target

    fb1034754f71520819a894123ac94b40_JaffaCakes118.exe

  • Size

    277KB

  • MD5

    fb1034754f71520819a894123ac94b40

  • SHA1

    b6631106a21c9c4579904a67f20158f20f1b4315

  • SHA256

    1f5b33dc614775931bd9eb59d12624055cb6f2b435cc6beffdac048eb79dbefb

  • SHA512

    06e98e392dc0b56252df95b42ac79052053afcbffef3ef6dd2dc2c0b15e25e6bc278c829b0f6e6b47d17dfd337b86d4f9e430e4415c4505861936efaf6162400

  • SSDEEP

    6144:fxVRRuv9ESvEyV1Aihx/ayFmubJI45+UHJlXfJlk:fTRRi9rcyV1AiPfFR1D/fw

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fb1034754f71520819a894123ac94b40_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fb1034754f71520819a894123ac94b40_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of UnmapMainImage
    PID:2736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2736-0-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/2736-1-0x0000000000490000-0x00000000004CC000-memory.dmp

    Filesize

    240KB

  • memory/2736-5-0x0000000000400000-0x000000000043C000-memory.dmp

    Filesize

    240KB

  • memory/2736-3-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/2736-2-0x0000000000400000-0x000000000043C000-memory.dmp

    Filesize

    240KB

  • memory/2736-7-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/2736-10-0x0000000000400000-0x000000000043C000-memory.dmp

    Filesize

    240KB

  • memory/2736-12-0x0000000000490000-0x00000000004CC000-memory.dmp

    Filesize

    240KB

  • memory/2736-11-0x0000000000400000-0x000000000043C000-memory.dmp

    Filesize

    240KB