Analysis

  • max time kernel
    140s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 22:17

General

  • Target

    484abb360672ef8b8f9a68ebe38c4520_JaffaCakes118.exe

  • Size

    869KB

  • MD5

    484abb360672ef8b8f9a68ebe38c4520

  • SHA1

    a30a4c05cc25b08fdbd4acc2bf84d313300e2763

  • SHA256

    52fb6237949e1b9cc327f5b2cca18d64d835c09862ddfc57d8517c46e1765f99

  • SHA512

    ae9e26c14409466e33d7af8b3376629f8bb1ed8265c2f65b1162ad545d9f151cb6b34c6e75de3bb1b352ee1ddb297065886793974787302c082d42995f9162e5

  • SSDEEP

    24576:gHxGWwMJ+jXk+GQeYtz0+uVSLarRrJeFacc:AdwKikDQeA0+u19Jaq

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\484abb360672ef8b8f9a68ebe38c4520_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\484abb360672ef8b8f9a68ebe38c4520_JaffaCakes118.exe"
    1⤵
      PID:1340

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1340-0-0x0000000000400000-0x00000000006D3000-memory.dmp

            Filesize

            2.8MB

          • memory/1340-1-0x00000000003B0000-0x00000000003B1000-memory.dmp

            Filesize

            4KB

          • memory/1340-2-0x0000000000400000-0x00000000006D3000-memory.dmp

            Filesize

            2.8MB

          • memory/1340-4-0x00000000003B0000-0x00000000003B1000-memory.dmp

            Filesize

            4KB