ada48e020749964ef3972a7818ef28ab12c654253a6f946bc92e4f5bf74ef5eb

Analysis

max time kernel
150s
max time network
156s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
24/06/2024, 07:38

Target

073bd8fc31554e7cf776f35df210e4cb_JaffaCakes118.exe
Size

1.3MB
MD5

073bd8fc31554e7cf776f35df210e4cb
SHA1

e04582f637745feceaf46722ca5c40da5c8f5e26
SHA256

ada48e020749964ef3972a7818ef28ab12c654253a6f946bc92e4f5bf74ef5eb
SHA512

0d376f015b55465d85fdcc406962081f8304f3906fc206e9a4f58632e191f9907ba1a13d6d6779547d232399d04abacfe60b6571684e2a15e72aa368815ae39a
SSDEEP

24576:jm8jTAQv5zo+3LjQmXqxP/XrlThCOf2MrBd/WX:jmJQvJTkPPJThr2+BRW

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2064-0-0x0000000000400000-0x0000000000559000-memory.dmp	upx
behavioral1/memory/2064-5-0x0000000000400000-0x0000000000559000-memory.dmp	upx

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
2064	073bd8fc31554e7cf776f35df210e4cb_JaffaCakes118.exe
2064	073bd8fc31554e7cf776f35df210e4cb_JaffaCakes118.exe
2064	073bd8fc31554e7cf776f35df210e4cb_JaffaCakes118.exe
2064	073bd8fc31554e7cf776f35df210e4cb_JaffaCakes118.exe
2064	073bd8fc31554e7cf776f35df210e4cb_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\073bd8fc31554e7cf776f35df210e4cb_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\073bd8fc31554e7cf776f35df210e4cb_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2064

memory/2064-0-0x0000000000400000-0x0000000000559000-memory.dmp

Filesize
1.3MB

Download
memory/2064-1-0x0000000000AB0000-0x0000000000C09000-memory.dmp

Filesize
1.3MB

Download
memory/2064-2-0x0000000000AB0000-0x0000000000C09000-memory.dmp

Filesize
1.3MB

Download
memory/2064-5-0x0000000000400000-0x0000000000559000-memory.dmp

Filesize
1.3MB

Download
memory/2064-6-0x0000000000AB0000-0x0000000000C09000-memory.dmp

Filesize
1.3MB

Download