Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
24/06/2024, 00:41
General
-
Target
05c52ef71b87358f0569d19e9adcdd8b_JaffaCakes118.exe
-
Size
111KB
-
MD5
05c52ef71b87358f0569d19e9adcdd8b
-
SHA1
e2658d0f18dc2ad5f28e1a54df4f778577ec304b
-
SHA256
db5c169c766e1a9e9e29ff5b8b424025f4f4fc39df05b29e957ff9154a02e5d6
-
SHA512
ac367ebb93808a93092209c5b37082ff305dc8b58a3244def96d842f6abdd0cf8ad1fcc3963f97a9988c98e6f6016fcc83265fe5f989aff685db69d881ead82b
-
SSDEEP
3072:fglQ7Xy7PpnzONzvnH22BT0c4Iwuys9DDKcKMrwgP:fdu7BzONDW2BlyJcV
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\05c52ef71b87358f0569d19e9adcdd8b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\05c52ef71b87358f0569d19e9adcdd8b_JaffaCakes118.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
212KB
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
56KB
-
Filesize
8KB