9775b198e8e595cc47ee21c6904af6618c405975996885d534caf8cb8931cd93

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
10/06/2024, 21:40

Target

9c0660c2e07db3f74fa60d82d37508f4_JaffaCakes118.exe
Size

150KB
MD5

9c0660c2e07db3f74fa60d82d37508f4
SHA1

1217d5b0a2e7047ed74e46ad0326cd59462fd080
SHA256

9775b198e8e595cc47ee21c6904af6618c405975996885d534caf8cb8931cd93
SHA512

b589d7892dcecfb000c1b5a8b1ce206ee506fd327a3b5b9c37df5f1f2a579fd71a2ee48d49a450b639b699f5506882924d1c3e8425473ce4e864e7dff2baea72
SSDEEP

1536:DJlQdApO9tHI/7umNZdQ+1B2zLWIQa4PSj/WAvN3EcyEnOs4wwe:DJOGOHHwu8qTq8UavXjwe

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1712-4-0x0000000000400000-0x0000000000457000-memory.dmp	upx
behavioral1/memory/1712-6-0x0000000000400000-0x0000000000457000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\9c0660c2e07db3f74fa60d82d37508f4_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\9c0660c2e07db3f74fa60d82d37508f4_JaffaCakes118.exe"
1⤵
PID:1712

memory/1712-4-0x0000000000400000-0x0000000000457000-memory.dmp

Filesize
348KB

Download
memory/1712-0-0x0000000010000000-0x000000001000E000-memory.dmp

Filesize
56KB

Download
memory/1712-6-0x0000000000400000-0x0000000000457000-memory.dmp

Filesize
348KB

Download