Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
08-05-2024 11:14
Behavioral task
behavioral1
Sample
2497dad7a0f8bef5142b0496d692100f_JaffaCakes118.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2497dad7a0f8bef5142b0496d692100f_JaffaCakes118.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
2497dad7a0f8bef5142b0496d692100f_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
2497dad7a0f8bef5142b0496d692100f
-
SHA1
f3ef7c63693b18504d1fa84e1640d30bb1306752
-
SHA256
0e252656f744b9624bd446edd6beb45dca8da491257fef75cc713d8b85eb7609
-
SHA512
fb463e98031582435bec25c714217943ebd6f146d891a3f4f11bf16984a8b29c757342a94cf5ab7fc1057c5a50428e2b837bf059ff545d0217f01da0a877cca1
-
SSDEEP
24576:nvOlypK8bzwZ/ax9QKPDc5QZ6LmTaaQTJ4X6J/QrO/m+i43Q/Rd0TT:vQypKOwtaHQKYymll4Xbrqmt/Un
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3076-0-0x0000000000400000-0x0000000000752000-memory.dmp upx behavioral2/memory/3076-2-0x0000000000400000-0x0000000000752000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3076 2497dad7a0f8bef5142b0496d692100f_JaffaCakes118.exe 3076 2497dad7a0f8bef5142b0496d692100f_JaffaCakes118.exe