Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
28-03-2024 11:18
General
-
Target
0449f28450f8e5877b6526782d225f5f_JaffaCakes118.exe
-
Size
1.4MB
-
MD5
0449f28450f8e5877b6526782d225f5f
-
SHA1
af5da255cd3d02006bb4c66f7ae37606d470a09e
-
SHA256
c31c4fbaa4b7a4f9667cc17a3c12cedc9605bc86ebd1934c084a8626eea92da7
-
SHA512
f36144738233c428dd3bec84a649fa1892345e9bc464d626a71b711f4994d8776ee3059a08cd02ba9b587c5dd42797e0d0d7bc07e3b26d9d16992ea4f28496e1
-
SSDEEP
24576:ur0Y0b3wTBY0zc3OHmIOss9/DQTBlFadP6WNltPSQv:ub6gT20iOHmIPWDQll86Ytfv
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0449f28450f8e5877b6526782d225f5f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0449f28450f8e5877b6526782d225f5f_JaffaCakes118.exe"1⤵