e491bfeabf682fb69bf9be6a78394f129a0273f94025b097d743414821b0580e

Analysis

max time kernel
141s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/04/2024, 01:13

Target

ec602c95cbb633c38d09ba7e124952e9_JaffaCakes118.exe
Size

83KB
MD5

ec602c95cbb633c38d09ba7e124952e9
SHA1

8651e49a791e243950da640ade9bb772f0c3a8b4
SHA256

e491bfeabf682fb69bf9be6a78394f129a0273f94025b097d743414821b0580e
SHA512

326f3d3b7ad877807a514299335bd515ddbc14acfd1123ac9bdd9ce9337eb48de8379887b319ccf443a32b5b25e252a5c5c734159ffb62e45216bcc279d8d0c1
SSDEEP

1536:Ye7EY56M0CRvenSdolIw+doZpook/ih18Vm/fXPmkPj4hcJSPFfX:Y8Eq6M0ConSdolIVdUh1XQhuSJ

Score

7^/10

upx

UPX packed file 16 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2196-0-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-1-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-2-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-3-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-4-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-5-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-6-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-7-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-8-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-9-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-10-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-11-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-12-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-13-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-14-0x0000000000400000-0x000000000043D000-memory.dmp	upx
behavioral1/memory/2196-15-0x0000000000400000-0x000000000043D000-memory.dmp	upx

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2196	ec602c95cbb633c38d09ba7e124952e9_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\ec602c95cbb633c38d09ba7e124952e9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ec602c95cbb633c38d09ba7e124952e9_JaffaCakes118.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2196

memory/2196-0-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-1-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-2-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-3-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-4-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-5-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-6-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-7-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-8-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-9-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-10-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-11-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-12-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-13-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-14-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2196-15-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download