Analysis

  • max time kernel
    155s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-04-2024 19:56

General

  • Target

    fb0e0cb0a8eb09974d6c01dc357ba0a1_JaffaCakes118.exe

  • Size

    1.8MB

  • MD5

    fb0e0cb0a8eb09974d6c01dc357ba0a1

  • SHA1

    f2e2117ab3bd3dd1953b6c55519ec82999ff298a

  • SHA256

    2e55cff1bae8c1ae098f0b4862a3dec903a78dd8707ec0a0d46598be4ec70686

  • SHA512

    a7a0bb99b12149f7c18a2e334ae1645eb99879f69c1d3c01d80b06f9d6358add947c9c9ca1a4c7e2ad20fefcad820f53d790690bea25bcd28867db1885bef714

  • SSDEEP

    24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxqz:SCqm2Jpr0nNM7Dus7Nx6

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fb0e0cb0a8eb09974d6c01dc357ba0a1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fb0e0cb0a8eb09974d6c01dc357ba0a1_JaffaCakes118.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2964
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1348 --field-trial-handle=2280,i,716736634476467098,11449718822158202904,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:4840

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files\7-Zip\7-zip32.dll

      Filesize

      1.8MB

      MD5

      e50b627b38c14bc92f7f23dcbe30a564

      SHA1

      078a9a8fbc0c32cbd5600a49a96f6e4fb7a72be2

      SHA256

      3f4d0ba0c1f8d6a0db3e17772ff660a03820327b81de3b8ffcfb5c32eac9a58a

      SHA512

      9c7d099e02db3b5cad9c0d970550fcf146eb7a76b4d9d28804caeba921723f92ac181c7e98e4b1e65179db9f8f1349d0b2eee1a50d6d61e4f489e6a74ca13f16

    • memory/2964-0-0x0000000000400000-0x00000000005BA000-memory.dmp

      Filesize

      1.7MB

    • memory/2964-578-0x0000000000400000-0x00000000005BA000-memory.dmp

      Filesize

      1.7MB