Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2025, 08:12

General

  • Target

    JaffaCakes118_96c9ae52cb0f371259f9971e805f9c4c.exe

  • Size

    13.0MB

  • MD5

    96c9ae52cb0f371259f9971e805f9c4c

  • SHA1

    cb11dd6086bd0d722fc9ac8ee3f0401885002ec7

  • SHA256

    179cfed646fcc3de5e2574f1c4504c960773eba987cacc975f16184bf1bad1fb

  • SHA512

    f07814dc482656b73212daa40065b0a903037d4191ca8574ad40672df2770840660b279ea30f4eba86dfb2933cc679b17c06da05da297bc4f627f0adf682d749

  • SSDEEP

    98304:I/Y7zB7KFh/xi9zfzm/f47L6xUad6z4xPjmyPA5Q6haqMI48TwNA/c3OjyRiY1p2:IZ5xM3mIaRdFFjJPlIi5NA/c3OjyUY3

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_96c9ae52cb0f371259f9971e805f9c4c.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_96c9ae52cb0f371259f9971e805f9c4c.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
      dw20.exe -x -s 424
      2⤵
        PID:1516

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1516-4-0x0000000000250000-0x0000000000251000-memory.dmp

      Filesize

      4KB

    • memory/2204-0-0x000007FEF648E000-0x000007FEF648F000-memory.dmp

      Filesize

      4KB

    • memory/2204-1-0x000007FEF61D0000-0x000007FEF6B6D000-memory.dmp

      Filesize

      9.6MB

    • memory/2204-2-0x000007FEF61D0000-0x000007FEF6B6D000-memory.dmp

      Filesize

      9.6MB

    • memory/2204-3-0x000007FEF61D0000-0x000007FEF6B6D000-memory.dmp

      Filesize

      9.6MB

    • memory/2204-5-0x000007FEF648E000-0x000007FEF648F000-memory.dmp

      Filesize

      4KB

    • memory/2204-6-0x000007FEF61D0000-0x000007FEF6B6D000-memory.dmp

      Filesize

      9.6MB