Analysis
-
max time kernel
138s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28-06-2024 13:28
Static task
static1
Behavioral task
behavioral1
Sample
1a4c1b223fd0e0309afd0db025098aad_JaffaCakes118.dll
Resource
win7-20240220-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
1a4c1b223fd0e0309afd0db025098aad_JaffaCakes118.dll
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
1a4c1b223fd0e0309afd0db025098aad_JaffaCakes118.dll
-
Size
330KB
-
MD5
1a4c1b223fd0e0309afd0db025098aad
-
SHA1
f9ebdaf5803847d99714b74f459b9f10356a0e66
-
SHA256
969e3a90b4b48c1eddf8b86ad3db1f5a220f9f349f9c13171a9daedf05b40ed9
-
SHA512
13b03136e63ef03b5cdd25ca447ccd1bd874d9df0345785dc653e9c1e75039630968a053d8c975e31d3bee0cfa313dbbeb6b29cf8566db183d2fd5ee772311e8
-
SSDEEP
3072:JRq1sFAd2gQ5PmBvNZwnnq1gn2RvoXiDzAYgrO1v2F5j8eFu:rq1sFAwgwmBv3wnIgG4oAYxvU54eu
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 3248 wrote to memory of 2784 3248 rundll32.exe rundll32.exe PID 3248 wrote to memory of 2784 3248 rundll32.exe rundll32.exe PID 3248 wrote to memory of 2784 3248 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1a4c1b223fd0e0309afd0db025098aad_JaffaCakes118.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1a4c1b223fd0e0309afd0db025098aad_JaffaCakes118.dll,#12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3144 --field-trial-handle=2280,i,716736634476467098,11449718822158202904,262144 --variations-seed-version /prefetch:81⤵