Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2024, 07:14

General

  • Target

    9a6c6918919b7c9ba79e0c787c8cd7c0_JaffaCakes118.exe

  • Size

    1.1MB

  • MD5

    9a6c6918919b7c9ba79e0c787c8cd7c0

  • SHA1

    52d1718905c5dbdc729edacacb333e6447512211

  • SHA256

    247ebec9b4b590970584b93005f88e30752122b651be265b46fcd6d549864a51

  • SHA512

    83539de472a4408e8235e47be3460ad5e172a21d3e0a95932f66ba2c5c953d28bb561ef8b5dde768a2ab5eedd868009757af9098676c2e51f1da6d5f35dbf92c

  • SSDEEP

    24576:VWOxTeUmFT0GnO0J+G/VMJ+ZrRKe0JGKjqDKBL2Iho:UOxTugGnVu8lizjq2lLK

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9a6c6918919b7c9ba79e0c787c8cd7c0_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9a6c6918919b7c9ba79e0c787c8cd7c0_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2812-0-0x0000000000400000-0x0000000000739000-memory.dmp

    Filesize

    3.2MB

  • memory/2812-1-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2812-2-0x0000000000400000-0x0000000000739000-memory.dmp

    Filesize

    3.2MB

  • memory/2812-4-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB