Analysis

  • max time kernel
    91s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-06-2024 15:29

General

  • Target

    af183664127c46a716b4be355422b47d_JaffaCakes118.exe

  • Size

    10.6MB

  • MD5

    af183664127c46a716b4be355422b47d

  • SHA1

    d044659bd4243bb574cff02c63ce67d114ebae5d

  • SHA256

    89cb05214b82d166e6fe7487a87da9aa33a48c6241f3d4037263886099dd3cd8

  • SHA512

    ac614a1d2a55d9833158f63616445f1bb421e2a8985e824e0450cf7693e8a9d154b3a919acca7e9fac6b88a6d1ead17ef541f26c67c12331477157633820372c

  • SSDEEP

    196608:UNEPJSPWMI+9o//vk3feNY+G7d9dKpEhsJw0h1BF8kTVXoBFxC41WMj+eRkm0Nbx:GAJSvs/vk3feNY+G7d9dKpEhsJw0h1Bj

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\af183664127c46a716b4be355422b47d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\af183664127c46a716b4be355422b47d_JaffaCakes118.exe"
    1⤵
      PID:4828

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4828-0-0x00007FF780EF0000-0x00007FF7824E4000-memory.dmp
      Filesize

      22.0MB

    • memory/4828-1-0x00007FF780EF0000-0x00007FF7824E4000-memory.dmp
      Filesize

      22.0MB