c5e3c196a0f40240393aa36d4c8f46baea83cc56c47af9f31b99e4df1994df6c

Analysis

max time kernel
140s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 11:22

Target

1b1a76d6d58b8bc1da8609765b2fd83e_JaffaCakes118.exe
Size

302KB
MD5

1b1a76d6d58b8bc1da8609765b2fd83e
SHA1

ed2be95cd3be33f6278ea0816f83779a186c8fee
SHA256

c5e3c196a0f40240393aa36d4c8f46baea83cc56c47af9f31b99e4df1994df6c
SHA512

338e52aaedd6975674ab8739be4b01e16be4284ad5c7748f55d5601c1632c0f6e591fd8c9f8e32fb7ac2731d78895c7a7dd7bc45619ea46ea9265529d17cd81a
SSDEEP

6144:z9gkUFxmNNCtfCXvoMHN6Xc4qUvXcQKaMVLAe/:RUFxmNNCtfqN6Xc4TPKaMVLl

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2436-0-0x0000000000400000-0x0000000000511000-memory.dmp	upx
behavioral1/memory/2436-2-0x0000000000400000-0x0000000000511000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\1b1a76d6d58b8bc1da8609765b2fd83e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1b1a76d6d58b8bc1da8609765b2fd83e_JaffaCakes118.exe"
1⤵
PID:2436

memory/2436-0-0x0000000000400000-0x0000000000511000-memory.dmp

Filesize
1.1MB

Download
memory/2436-1-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download
memory/2436-2-0x0000000000400000-0x0000000000511000-memory.dmp

Filesize
1.1MB

Download
memory/2436-4-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download