6522ef8de1ededc0fc6be03443e72a00a151f484f777fcefbaa9ba34687379f0

Analysis

max time kernel
140s
max time network
149s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
18-04-2024 14:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
Size

132KB
MD5

f82ed514f7663d3b398469e1cb80b78a
SHA1

05c565c11925c6a6f0821891da6f7f8330a6a302
SHA256

6522ef8de1ededc0fc6be03443e72a00a151f484f777fcefbaa9ba34687379f0
SHA512

59231cfaeafdee8788c1cbd9d063864cdd3d47f1623aa44b446df334e1c1964ff6125eeaaa276e157596367766dc14b188bf5780166c4acbdbb801ebed39b52a
SSDEEP

1536:3UUUUUUUUUUHdTD+vvvvvvvvvh+UUUUUUUC9mIkkkkkkTyhhhhhhhMa3KN2Y6Lqb:blN9RkkkkkkTLJ0Y6LFrpQQVQl

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2328-0-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral1/files/0x00090000000146b8-6.dat	upx
behavioral1/memory/2328-20-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Drops file in Windows directory 18 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\Doom 3 fix.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File created	C:\Windows\win32dc\DAoC_cdfix.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2_crack.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File created	C:\Windows\win32dc\Doom 3_trainer.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File created	C:\Windows\win32dc\Half-Life 2_crack.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File created	C:\Windows\win32dc\FlatOut + trainer.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File created	C:\Windows\win32dc\DAoC + cheat.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Doom 3_trainer.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File created	C:\Windows\win32dc\Half-Life 2 + trainer.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File created	C:\Windows\win32dc\FlatOut(patch).exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File created	C:\Windows\win32dc\Quake3(nocd).exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Quake3(nocd).exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File created	C:\Windows\win32dc\Counter-Strike_nocd.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike_nocd.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2 + trainer.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\FlatOut(patch).exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\DAoC_cdfix.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\DAoC + cheat.exe	f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f82ed514f7663d3b398469e1cb80b78a_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:2328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\Half-Life 2 + trainer.exe

Filesize
136KB

MD5
65c151521592a63d9490ebb6ed423d04

SHA1
922192ed9e156f2cdf21dcbb34985b2eace21ac7

SHA256
41dadd6406e788dfb34eb26e88851ba41d1abc81c8d838f44d8b335e716c4ba8

SHA512
68faef93f4bdf8b79d9606f20d29c6b9d0c89621d7f4d7710b74221ba86739e7ba53fb61cf7f486b02cc3d36d9f20d2f46ba36a789cc11f91a919b39a700482b

Download Submit
memory/2328-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2328-20-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads