Analysis

  • max time kernel
    92s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-03-2024 21:56

General

  • Target

    111ded4c9bcb1f85ab0070990201eafd_JaffaCakes118.exe

  • Size

    14KB

  • MD5

    111ded4c9bcb1f85ab0070990201eafd

  • SHA1

    70c8905c9c49a5c33ce6cb9554304d5495163800

  • SHA256

    cf9fb57f0a2d728c35fea44ee128443fe36354c6b30f54651505c5606fd6f85f

  • SHA512

    c0f6501c6347fa1cba2c44c449e3e77093ad8e2437ce3069b81e6a72fd87985007b903aa9fb5cd066c19b3554c6f888cd3499fd20482774bd5ea0fa7ce5ddcd3

  • SSDEEP

    384:9I9h5Bx8MlUktE1uE+6vcbV4A2XyyTfGD2M8jPzEiXJMZJgw:whd8hkC1tEbV4NQDAjPzEi5M3X

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\111ded4c9bcb1f85ab0070990201eafd_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\111ded4c9bcb1f85ab0070990201eafd_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    PID:1688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1688-0-0x0000000000400000-0x000000000041A000-memory.dmp

    Filesize

    104KB

  • memory/1688-2-0x0000000000400000-0x000000000041A000-memory.dmp

    Filesize

    104KB