Analysis

  • max time kernel
    144s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09-10-2024 07:27

General

  • Target

    2d33ad4feca7f35549aabf53640bc4e6_JaffaCakes118.exe

  • Size

    329KB

  • MD5

    2d33ad4feca7f35549aabf53640bc4e6

  • SHA1

    86842fb776cecc89e3adbf209119cd312ca31e88

  • SHA256

    a55f253a4cae43db42ae34e243ff257d3a2b2ec0dfd21740c0932983eccf5b0a

  • SHA512

    30cd172b9941245f3d97a8dc20c1eb7eac03638f51997674d336c8c61307d710ef41766ad42ca2acdb295ec05b982ede9666cbb00d6a2c419bcef109962cd09a

  • SSDEEP

    6144:BojDuUlqOSBojDuUl1ojDuUlqOSBojDuUlo0pXPVwaijojDuUl/ZAqaoUomBsQXr:BeDuUloeDuUl1eDuUloeDuUlTqjeDuUc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d33ad4feca7f35549aabf53640bc4e6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2d33ad4feca7f35549aabf53640bc4e6_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3044-0-0x000007FEF5E6E000-0x000007FEF5E6F000-memory.dmp

    Filesize

    4KB

  • memory/3044-1-0x000007FEF5BB0000-0x000007FEF654D000-memory.dmp

    Filesize

    9.6MB

  • memory/3044-2-0x000007FEF5BB0000-0x000007FEF654D000-memory.dmp

    Filesize

    9.6MB

  • memory/3044-3-0x000007FEF5BB0000-0x000007FEF654D000-memory.dmp

    Filesize

    9.6MB

  • memory/3044-4-0x000007FEF5BB0000-0x000007FEF654D000-memory.dmp

    Filesize

    9.6MB

  • memory/3044-5-0x000007FEF5E6E000-0x000007FEF5E6F000-memory.dmp

    Filesize

    4KB

  • memory/3044-6-0x000007FEF5BB0000-0x000007FEF654D000-memory.dmp

    Filesize

    9.6MB

  • memory/3044-7-0x000007FEF5BB0000-0x000007FEF654D000-memory.dmp

    Filesize

    9.6MB

  • memory/3044-8-0x000007FEF5BB0000-0x000007FEF654D000-memory.dmp

    Filesize

    9.6MB

  • memory/3044-9-0x000007FEF5BB0000-0x000007FEF654D000-memory.dmp

    Filesize

    9.6MB