b41b6c3e1ab5210b817b8363dcda40ffacb5923e351e517481badc54d9c4ed93

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
31/05/2024, 12:04

Target

86effe268710abd65dd9be1dc92603e2_JaffaCakes118.exe
Size

57KB
MD5

86effe268710abd65dd9be1dc92603e2
SHA1

6a3f73237085a35a88701a1a6c2d892fbdb546e3
SHA256

b41b6c3e1ab5210b817b8363dcda40ffacb5923e351e517481badc54d9c4ed93
SHA512

022e5d7253749637c269d756b1a4d03336e237d0340e669625dd62b05758b50c6189ba0657c135c6ef9eb675939bad7a6646997bef69fd8d563e9e316375d348
SSDEEP

1536:VX5gbOmhjYfYHGKk/DPzC/ajRNkd39xCMD:t5gpKYmVrC/asdrD

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2548-4-0x0000000000400000-0x0000000000429000-memory.dmp	upx
behavioral1/memory/2548-5-0x0000000000400000-0x0000000000429000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\86effe268710abd65dd9be1dc92603e2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\86effe268710abd65dd9be1dc92603e2_JaffaCakes118.exe"
1⤵
PID:2548

memory/2548-0-0x0000000010000000-0x000000001000E000-memory.dmp

Filesize
56KB

Download
memory/2548-4-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download
memory/2548-5-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download