Overview

overview

7

Static

static

3

169074f6d8...18.exe

windows7-x64

7

169074f6d8...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    126s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/06/2024, 15:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    169074f6d83c9f3b69778a35541dcfc2_JaffaCakes118.exe

  • Size

    116KB

  • MD5

    169074f6d83c9f3b69778a35541dcfc2

  • SHA1

    b5bf9696b954c092d1585284da1376a1783c07c5

  • SHA256

    cb0dbd89ca8b8e18f2e6d4740274cb531fe3f4425b0eec1bd12102366b7e644a

  • SHA512

    70028cae3588a4fe8a53655b0d8d056482fa31af5aa02ac4fa70f00c7544aaff9397892586b0f2d7d2b4d117188d3dfc90394f708291ee05ab7b601bd8e8697b

  • SSDEEP

    1536:wUnoug3NF/QevdW/M96CxUj9W+ZkuDiOrvUvJ3eFWtNhLUE9GFPNHeARAV/HKJzw:+ugbCM08WNniOrv8hrbAA0V5AV/qm

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\169074f6d83c9f3b69778a35541dcfc2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\169074f6d83c9f3b69778a35541dcfc2_JaffaCakes118.exe"
    1⤵
      PID:4424
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4424 -s 496
        2⤵
        • Program crash
        PID:3040
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4424 -ip 4424
      1⤵
        PID:4980
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4356,i,5047420736443372512,9747851268033796534,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
        1⤵
          PID:5052

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4424-0-0x00000000004D0000-0x0000000000516000-memory.dmp

          Filesize

          280KB

          Download

        • memory/4424-1-0x000000000040A000-0x000000000040D000-memory.dmp

          Filesize

          12KB

          Download

        • memory/4424-3-0x0000000000400000-0x0000000000446000-memory.dmp

          Filesize

          280KB

          Download