Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
27/05/2024, 00:06
Behavioral task
behavioral1
Sample
7742ea51a7d42c24c8f14486e0f8ea33_JaffaCakes118.exe
Resource
win7-20240419-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7742ea51a7d42c24c8f14486e0f8ea33_JaffaCakes118.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
-
Target
7742ea51a7d42c24c8f14486e0f8ea33_JaffaCakes118.exe
-
Size
1.8MB
-
MD5
7742ea51a7d42c24c8f14486e0f8ea33
-
SHA1
9d5344689db9de4f447fc0bafc2d652c278a4871
-
SHA256
ebc8f263fd5391bc0352af40b7859b093742fe27a5bb7f90e6a55fd12667a2f0
-
SHA512
3c434d87aeeefb9166a3aed76a00a28e2d443f17c9b70a4e83df7743a92f98bf0bababfab96ddee7c287205fd2ac4598c252373a741389def5ad912d72e58a87
-
SSDEEP
49152:WVd8xZGhCHCdUBlcYiVz4+AH/jDkMVcbnuVNiDO5r3hzKMA:5ZGh2GUEV/RGcDuVwDO5rx2M
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/3000-40-0x0000000000400000-0x00000000007B7000-memory.dmp vmprotect behavioral1/memory/3000-39-0x0000000000400000-0x00000000007B7000-memory.dmp vmprotect -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3000 7742ea51a7d42c24c8f14486e0f8ea33_JaffaCakes118.exe 3000 7742ea51a7d42c24c8f14486e0f8ea33_JaffaCakes118.exe