d349d382c944a0385ae195d1ebb31ec02aed22f250cbfa7aa148fc617341d9d1

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28/06/2024, 08:54

Target

1986a14c69ab315370e409d9743b77eb_JaffaCakes118.exe
Size

53KB
MD5

1986a14c69ab315370e409d9743b77eb
SHA1

d38691f6f31a122cd0dce251c73444a8374c10c0
SHA256

d349d382c944a0385ae195d1ebb31ec02aed22f250cbfa7aa148fc617341d9d1
SHA512

00f877fbf1016c1af7641dad97bf6e2ed1fe85dc7302b2c7ecb00ac1492915a1f61b08db41de44c5324f726b69335cc781aeb7d3a9f8bd5f6392212d38856dde
SSDEEP

768:thSnvqRTimrZ/UC0yagiGHbIxQXHD+3JrFFK7H1S/+SE82GkaiWfiV:thivqRTLZQVgiVQXmxFsEtE890oiV

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3608-0-0x0000000000400000-0x0000000000426000-memory.dmp	upx
behavioral2/memory/3608-5-0x0000000000400000-0x0000000000426000-memory.dmp	upx

Drops file in System32 directory 4 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\电影.vbs	1986a14c69ab315370e409d9743b77eb_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\电影.vbs	1986a14c69ab315370e409d9743b77eb_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\电影.bat	1986a14c69ab315370e409d9743b77eb_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\电影.bat	1986a14c69ab315370e409d9743b77eb_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\1986a14c69ab315370e409d9743b77eb_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1986a14c69ab315370e409d9743b77eb_JaffaCakes118.exe"
1⤵
- Drops file in System32 directory
PID:3608

memory/3608-0-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download
memory/3608-5-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download