f2c77d01cc9241f08a71c22e01a094783f0b18c8e0de502588af14c2344e0965

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20-04-2024 03:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
Size

136KB
MD5

fbd81db8ec3c46dc6093afbbdcaf9821
SHA1

efdb5c939d380c6172e7833b3e657f4e11a879cf
SHA256

f2c77d01cc9241f08a71c22e01a094783f0b18c8e0de502588af14c2344e0965
SHA512

14ecea7782de415c5396253d2a1f6d592a9644713e8da1c4f06fb781d26ef7e3c37e96cf65335985570770b3e89eb52b73753eeb3cdc97f5f7d529d0efd2175a
SSDEEP

3072:blN9RkkkkkkTLJ0YufKOpHuMSIzxJzef5V09629:5dkkkkkkZpOpHRSwrs5W629

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/1444-0-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral1/memory/1444-1-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral1/files/0x0035000000015d7f-6.dat	upx
behavioral1/memory/1444-18-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Drops file in Windows directory 16 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\Sims 2(codes).exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File created	C:\Windows\win32dc\Quake3 patch.exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Quake3 patch.exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File created	C:\Windows\win32dc\FlatOut(crack).exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File created	C:\Windows\win32dc\Counter-Strike_nocd.exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File created	C:\Windows\win32dc\BattleField 1942 + cdfix.exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 + cdfix.exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File created	C:\Windows\win32dc\Sims 2 + patch.exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike_nocd.exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File created	C:\Windows\win32dc\Doom 3(codes).exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File created	C:\Windows\win32dc\DAoC + nocd.exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File created	C:\Windows\win32dc\Silent Hill 4(crack).exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4(crack).exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4_codes.exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File created	C:\Windows\win32dc\Silent Hill 4_codes.exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Sims 2 + patch.exe	fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fbd81db8ec3c46dc6093afbbdcaf9821_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:1444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\Silent Hill 4_codes.exe

Filesize
137KB

MD5
88d07d5a48b7f7d2b565bfe7ba4d0917

SHA1
8eb7d9df4f08f5c88869e831231d7a01b8a1fc33

SHA256
54c5136c9132811e228e85ba781952c73d38ee4622aad55cf210c7eff2a6e7e2

SHA512
a22598cfe0987feba610a22fb31f1b32171d83921a85aca3e7f0a4ebedb15e3012d05174bc3da66e6055b528ef433958a8e74858f6c78f954c4fca8fb30320e2

Download Submit
memory/1444-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/1444-1-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/1444-18-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads