970a390b87322a4c0b4ca876ab10a2fe0816f78a79581626ac9df80c7b62126c

Analysis

max time kernel
141s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25-06-2024 20:22

Target

0f66c91ec7e196713d850bd4082ef134_JaffaCakes118.dll
Size

100KB
MD5

0f66c91ec7e196713d850bd4082ef134
SHA1

b6bbf88ac412419e6d802502c8202a3b64769e2a
SHA256

970a390b87322a4c0b4ca876ab10a2fe0816f78a79581626ac9df80c7b62126c
SHA512

440aeaa40c010d8947bdd7d7859ea14c32ca3e911868d661a826652fd6474d422aaa240e84ae3be431ebcc25f44c1f73830b00a02217178af5b089c4fd3c5692
SSDEEP

3072:v2DTv1alQzE+urw410XO51vAVUW+TJrLV:v2DTvMlAN46XO7AGhTX

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4480-0-0x0000000010000000-0x000000001000D000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4836 wrote to memory of 4480	4836	rundll32.exe	89
PID 4836 wrote to memory of 4480	4836	rundll32.exe	89
PID 4836 wrote to memory of 4480	4836	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0f66c91ec7e196713d850bd4082ef134_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4836
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0f66c91ec7e196713d850bd4082ef134_JaffaCakes118.dll,#1
  2⤵
  PID:4480

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4172 --field-trial-handle=2264,i,15001568551143786084,90255922961447677,262144 --variations-seed-version /prefetch:8
1⤵
PID:432

memory/4480-0-0x0000000010000000-0x000000001000D000-memory.dmp

Filesize
52KB

Download