Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    24/06/2024, 17:38

General

  • Target

    09e3effc9cf0e5f4fbbcf2486b16b31e_JaffaCakes118.exe

  • Size

    255KB

  • MD5

    09e3effc9cf0e5f4fbbcf2486b16b31e

  • SHA1

    35572fe3e602abd2a3b56675ac7d38aebb70d99b

  • SHA256

    2e5341111fa11b1b77855d0920c165adc70d2fe1d6e05b7957f6d72f5a735fe2

  • SHA512

    d99de4cdc564985ed2e2656848937690b81375a9fd7b6183c124b1e6260b5b4d686edb06ab3bcf470fdaf2d88bcba4c2ea0e026fd93265035b22a9d525c72ab2

  • SSDEEP

    6144:nYZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew8mZi:nSNC80I+cR3R03VseLmZi

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\09e3effc9cf0e5f4fbbcf2486b16b31e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\09e3effc9cf0e5f4fbbcf2486b16b31e_JaffaCakes118.exe"
    1⤵
      PID:2728

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2728-0-0x0000000000400000-0x00000000004A2000-memory.dmp

      Filesize

      648KB

    • memory/2728-1-0x0000000000910000-0x0000000000911000-memory.dmp

      Filesize

      4KB

    • memory/2728-2-0x0000000000400000-0x00000000004A2000-memory.dmp

      Filesize

      648KB