Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
01-07-2024 18:24
Behavioral task
behavioral1
Sample
1c09f129cbaadcb2a830c29b137db21d_JaffaCakes118.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1c09f129cbaadcb2a830c29b137db21d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
1c09f129cbaadcb2a830c29b137db21d_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
1c09f129cbaadcb2a830c29b137db21d
-
SHA1
9f4ead39c54820880191490b825bd355c961a591
-
SHA256
0ed2bdc8c6321cabb7b918b132a01cc9f8ea96badf6bf6bc00728c25353306ce
-
SHA512
e4391b6d5734c773d8c47f41dc7e1c52eeb282bd0995e2e28f5d82f865745dca0371bf553c8ee539ba986569f15644dbfe2e2b9f44ccd19646a657018b71d828
-
SSDEEP
24576:4ozWSCigAmAN03cKw0NpxEprwa6BMKhDgZs1RHYI65ayrPvJLlqmavq:6pHnAasmEWrhDtzHQPRLlCC
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2036-4-0x0000000000400000-0x000000000065D02E-memory.dmp themida behavioral1/memory/2036-6-0x0000000000400000-0x000000000065D02E-memory.dmp themida -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2036 1c09f129cbaadcb2a830c29b137db21d_JaffaCakes118.exe