Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
15-04-2024 05:31
General
-
Target
f06ca8c97c46aa836848111f15db1a97_JaffaCakes118.exe
-
Size
79KB
-
MD5
f06ca8c97c46aa836848111f15db1a97
-
SHA1
4f688d978f6e0f6c3d34ecd82077956bc1c3a226
-
SHA256
dcf0b1f0d67040920bbd48a1f6f2038293f168b5c245606df32689bd909e854f
-
SHA512
fe4fcba5e9d0f64cfb363502a1fb1917ad070867d3174867d7d7834a6db469ea2ba6aec16d42b0a7e4d7aa706c3c4a8b945890e3bbf7c698e1bfb44fc24422ef
-
SSDEEP
1536:wF1kk3BqAFZD2uEodsUAQbn0TqKW8OQYJff5UImc/XZcoKd/wUIq:41xEIdsUbbn0OKW8O3J3y5cvZMH
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f06ca8c97c46aa836848111f15db1a97_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f06ca8c97c46aa836848111f15db1a97_JaffaCakes118.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
116KB
-
Filesize
8KB
-
Filesize
80KB
-
Filesize
56KB
-
Filesize
80KB