Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/04/2024, 21:32

General

  • Target

    f69e098ebb99b116cd47dd7d0274f316_JaffaCakes118.exe

  • Size

    1010KB

  • MD5

    f69e098ebb99b116cd47dd7d0274f316

  • SHA1

    b04b561993c3623608fbb10993da4b9964367ca6

  • SHA256

    cabafb2dfe5444d6c0d1f8bb28be9a9d578ba435aff11d347499fc6309ae016d

  • SHA512

    d21f4c779a229cd082aae4e34232e1c944b6cf483eea1fa8a2f7662f731f0d9309f203cfb6e1e3b1534099e225116134d6b69585e8367ff4c0639eeb35502abe

  • SSDEEP

    24576:16WVT6WMaQwV6KSiWQm5ZZBLvcfpHUOLHoQ6n/:16W4WvE/v5lLEfpHUOboQI/

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\f69e098ebb99b116cd47dd7d0274f316_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f69e098ebb99b116cd47dd7d0274f316_JaffaCakes118.exe"
    1⤵
      PID:5036

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5036-0-0x0000000000400000-0x00000000004F7000-memory.dmp

      Filesize

      988KB

    • memory/5036-1-0x0000000002360000-0x0000000002361000-memory.dmp

      Filesize

      4KB

    • memory/5036-2-0x0000000000400000-0x00000000004F7000-memory.dmp

      Filesize

      988KB

    • memory/5036-3-0x0000000002360000-0x0000000002361000-memory.dmp

      Filesize

      4KB