Overview

overview

7

Static

static

7

0dc57fa442...18.exe

windows7-x64

7

0dc57fa442...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 19:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    0dc57fa44267f1c5488553f5450f80a0_JaffaCakes118.exe

  • Size

    14KB

  • MD5

    0dc57fa44267f1c5488553f5450f80a0

  • SHA1

    93be602d7f6b21ec0d41bc45032c043852e93d02

  • SHA256

    2142f15462bb30d4a8cdbd93b36a70a9e3b56f789436f77136d24dd7fa8d92d1

  • SHA512

    055c254222a25d051a519be8d0d9985eb1b7c01a870039f6cf482b5990332eb26203b8f427957ffdd693ebd4adc178f28a6dafdf3a74015632264e3cf05ae2f7

  • SSDEEP

    384:YQ9h5rTaMlUktE1uE8eBpqgNFHfuoeyPhCiP/QK5tJw41a2:Lh5ahkC1xOOBfrCiHf1D1B

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0dc57fa44267f1c5488553f5450f80a0_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0dc57fa44267f1c5488553f5450f80a0_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    PID:2848

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2848-1-0x0000000000400000-0x000000000041A000-memory.dmp

          Filesize

          104KB

          Download