Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    24-06-2024 23:46

General

  • Target

    0b581993193e56a74858f69b56681fb9_JaffaCakes118.exe

  • Size

    201KB

  • MD5

    0b581993193e56a74858f69b56681fb9

  • SHA1

    3e296794fe97f637661805a1ebd46779faf37b83

  • SHA256

    92cbcab5019a22e9e42928d903778c330814951d24061f394641a88d7410ec69

  • SHA512

    cc3e0b614779d101f3eb825e8fa37a3f5d1de4e2516c4ae5a18ea211fbd27d6f2806c304e67b7767f7a75f448634a9dfa148c304c760d4949117c3e5c8409187

  • SSDEEP

    6144:ZQSBBb5PcFKV9Jk21tcMF3FU+7xnE/J3/wS4ASRId8t:SoBblq29JL3BJi39hLG

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0b581993193e56a74858f69b56681fb9_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0b581993193e56a74858f69b56681fb9_JaffaCakes118.exe"
    1⤵
      PID:1840

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1840-0-0x0000000000400000-0x000000000044C000-memory.dmp

      Filesize

      304KB

    • memory/1840-1-0x00000000003C0000-0x00000000003D4000-memory.dmp

      Filesize

      80KB

    • memory/1840-3-0x0000000000400000-0x000000000044C000-memory.dmp

      Filesize

      304KB