3ebe0ebe2340c1b16a48a3fba39c5bce66990fee517aa15bd69aafebbbf87a62

Analysis

max time kernel
136s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
27/06/2024, 21:44

Target

17a4636f01487a9f8cbbcc72eaad54b9_JaffaCakes118.exe
Size

326KB
MD5

17a4636f01487a9f8cbbcc72eaad54b9
SHA1

e310ba3238092f6f001f8ba3b9e4b0756a98a598
SHA256

3ebe0ebe2340c1b16a48a3fba39c5bce66990fee517aa15bd69aafebbbf87a62
SHA512

b6ffb2aed078966beff0f150aea13f4f3afce0e6e54b1d514ec1c30963aa85dc0b8bb1563f0ca74e0d5583bb724fe7ee47d07e46545e6e6834aa26018bac8c17
SSDEEP

6144:XgtmRqeN5F4nXTJ1EF/zKWp9gSAA98ZaYu1lmCzmVCdfA/id374T2/5FDvaGMM6w:QtmRhNz4jJ1AmWKi8ZfgwTXih74T27D5

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4728-0-0x0000000000400000-0x00000000004C5000-memory.dmp	upx
behavioral2/memory/4728-3-0x0000000000400000-0x00000000004C5000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\17a4636f01487a9f8cbbcc72eaad54b9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\17a4636f01487a9f8cbbcc72eaad54b9_JaffaCakes118.exe"
1⤵
PID:4728

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=2812,i,6522675234395427298,2952738987384583032,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
1⤵
PID:1464

memory/4728-0-0x0000000000400000-0x00000000004C5000-memory.dmp

Filesize
788KB

Download
memory/4728-1-0x0000000002250000-0x0000000002251000-memory.dmp

Filesize
4KB

Download
memory/4728-3-0x0000000000400000-0x00000000004C5000-memory.dmp

Filesize
788KB

Download