Analysis
-
max time kernel
92s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28-03-2024 21:56
Behavioral task
behavioral1
Sample
111ded4c9bcb1f85ab0070990201eafd_JaffaCakes118.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
111ded4c9bcb1f85ab0070990201eafd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
111ded4c9bcb1f85ab0070990201eafd_JaffaCakes118.exe
-
Size
14KB
-
MD5
111ded4c9bcb1f85ab0070990201eafd
-
SHA1
70c8905c9c49a5c33ce6cb9554304d5495163800
-
SHA256
cf9fb57f0a2d728c35fea44ee128443fe36354c6b30f54651505c5606fd6f85f
-
SHA512
c0f6501c6347fa1cba2c44c449e3e77093ad8e2437ce3069b81e6a72fd87985007b903aa9fb5cd066c19b3554c6f888cd3499fd20482774bd5ea0fa7ce5ddcd3
-
SSDEEP
384:9I9h5Bx8MlUktE1uE+6vcbV4A2XyyTfGD2M8jPzEiXJMZJgw:whd8hkC1tEbV4NQDAjPzEi5M3X
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1688-0-0x0000000000400000-0x000000000041A000-memory.dmp upx behavioral2/memory/1688-2-0x0000000000400000-0x000000000041A000-memory.dmp upx -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 1688 111ded4c9bcb1f85ab0070990201eafd_JaffaCakes118.exe