Analysis
-
max time kernel
92s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
16-04-2024 18:46
Behavioral task
behavioral1
Sample
f4197b68ddeff510d2742180bb930787_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f4197b68ddeff510d2742180bb930787_JaffaCakes118.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
f4197b68ddeff510d2742180bb930787_JaffaCakes118.exe
-
Size
14KB
-
MD5
f4197b68ddeff510d2742180bb930787
-
SHA1
cf5ab71f750b6c0081a7517c139b6a644cd8dd8b
-
SHA256
4ac846c1aadaaf83f2d5f78e274027cdecbd43745020a2d03855686ef3338d0b
-
SHA512
6c3a4fe55312cebdd2b76900c3d137dcc2486feaed57c7f31800fab7eefc32b4ddf079401dcf0b7034925856b7dbcf879dd77a7efcf19eaed1d3d466d9b1a4d8
-
SSDEEP
384:fo9q5pG7Vbjz0QhuvmtSh/6kTMklKBcdDtI7JliSwlmerfVjuujQA+CJw0:GqDSbP0w+mFko/B8I7JUSiVfVyLA+Kr
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1320-0-0x0000000000400000-0x000000000041A000-memory.dmp upx behavioral2/memory/1320-2-0x0000000000400000-0x000000000041A000-memory.dmp upx -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 1320 f4197b68ddeff510d2742180bb930787_JaffaCakes118.exe