Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 15:29

General

  • Target

    af183664127c46a716b4be355422b47d_JaffaCakes118.exe

  • Size

    10.6MB

  • MD5

    af183664127c46a716b4be355422b47d

  • SHA1

    d044659bd4243bb574cff02c63ce67d114ebae5d

  • SHA256

    89cb05214b82d166e6fe7487a87da9aa33a48c6241f3d4037263886099dd3cd8

  • SHA512

    ac614a1d2a55d9833158f63616445f1bb421e2a8985e824e0450cf7693e8a9d154b3a919acca7e9fac6b88a6d1ead17ef541f26c67c12331477157633820372c

  • SSDEEP

    196608:UNEPJSPWMI+9o//vk3feNY+G7d9dKpEhsJw0h1BF8kTVXoBFxC41WMj+eRkm0Nbx:GAJSvs/vk3feNY+G7d9dKpEhsJw0h1Bj

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\af183664127c46a716b4be355422b47d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\af183664127c46a716b4be355422b47d_JaffaCakes118.exe"
    1⤵
      PID:1852

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1852-1-0x000000013FE30000-0x0000000141424000-memory.dmp
      Filesize

      22.0MB

    • memory/1852-2-0x000000013FE30000-0x0000000141424000-memory.dmp
      Filesize

      22.0MB