Analysis

  • max time kernel
    150s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 11:55

General

  • Target

    1a059a1623190293cf1d3ee313578534_JaffaCakes118.exe

  • Size

    21KB

  • MD5

    1a059a1623190293cf1d3ee313578534

  • SHA1

    86cace7222c4aacb24c36f70d9faebe59c90d217

  • SHA256

    4664b59d89c91f8bd0e8792833db4d87bc4ce9239870f07ce341b38e67a27e16

  • SHA512

    39bc91569586f7aa792ec179ed1ccd00a2d799dc6d226377b4a96eb756a22e343b2b28890a15fc4754b8919bade466f4858c761bdfebd5a7ed3deb2105c397a1

  • SSDEEP

    384:tqY5aR3TvtDMVD+FXc8eVEEc97nKLanxxZPRSyyG62Bsb:tquQ3FMVD+VcL3UnQaxrpSyvBs

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1a059a1623190293cf1d3ee313578534_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1a059a1623190293cf1d3ee313578534_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2012-0-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/2012-3-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/2012-5-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/2012-6-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/2012-8-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/2012-10-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/2012-12-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB