Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 13:57

General

  • Target

    ed94d35042c52ca170788c894fb37ffc_JaffaCakes118.exe

  • Size

    65KB

  • MD5

    ed94d35042c52ca170788c894fb37ffc

  • SHA1

    3e673d29ce8dc1a2cf36e392209b7fc6a313b44d

  • SHA256

    abcb93d291f71bf50e2a247974bc61ae20d7b44a0fea48877c0188e95e6983d8

  • SHA512

    7f0c07e214160c68b57b754fb9dab595b35871320dbf62b8a3fc63551d7f61a86a56b5d91e86618ab31101477c409cc06cee1d0cedfca588133e6c1a0d91de9f

  • SSDEEP

    1536:6Xy23h6y3qhw7ub28lV9utd+spCn08yrZE07Dn:44y3qhK8lV9oe07rZE0

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ed94d35042c52ca170788c894fb37ffc_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ed94d35042c52ca170788c894fb37ffc_JaffaCakes118.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    PID:2160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2160-0-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/2160-1-0x00000000003C0000-0x00000000003C1000-memory.dmp

    Filesize

    4KB

  • memory/2160-2-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

  • memory/2160-7-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB