Analysis
-
max time kernel
149s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28-05-2024 02:46
Behavioral task
behavioral1
Sample
7b6bc1f0d79fc8ea2e957839a6cf05e0_JaffaCakes118.exe
Resource
win7-20240220-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
7b6bc1f0d79fc8ea2e957839a6cf05e0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
7b6bc1f0d79fc8ea2e957839a6cf05e0_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
7b6bc1f0d79fc8ea2e957839a6cf05e0
-
SHA1
bf3e8b610eab7196c903f994ec543cdc6c18ae46
-
SHA256
9256be063256a51e40002d8f7f7c0537a5192baabbce00c6ee78deaf3bcbdfa6
-
SHA512
b46ac91ff5795226f11c2c1ccdb3ae1cf32a922ff836ba429d165a38fbb3e94dc3c12751854f2e466e5946ba0c1a423dcb97576afffaeed884bcb1d0cc4dfd86
-
SSDEEP
24576:MsYdFZavCNiskVhwOSGURjG2NR6ZMxZYE7AfAtBy/:4ZxNSPwrhGckI77IAu
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1836-0-0x0000000000400000-0x0000000000724000-memory.dmp upx behavioral2/memory/1836-2-0x0000000000400000-0x0000000000724000-memory.dmp upx behavioral2/memory/1836-3-0x0000000000400000-0x0000000000724000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1836 7b6bc1f0d79fc8ea2e957839a6cf05e0_JaffaCakes118.exe 1836 7b6bc1f0d79fc8ea2e957839a6cf05e0_JaffaCakes118.exe