9f278bbba36712d08834957d9ed0ba888d38a9f6fdeb1980571ab66960b05091

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 19:39

Target

1c423f3fed7511f661db8e1c9f59cdb2_JaffaCakes118.exe
Size

42KB
MD5

1c423f3fed7511f661db8e1c9f59cdb2
SHA1

de1dad521677a628f8a877291afdfcd3a57ef729
SHA256

9f278bbba36712d08834957d9ed0ba888d38a9f6fdeb1980571ab66960b05091
SHA512

9150df8e1e71ff6e1e029b9a57deda22e7419eded378ccead2bff9c8762f81bb45b74d4a56d68fc93a484501ca8cce423188c9301e40cb16b33770360824ef41
SSDEEP

768:1Wjuw5kgv4rSdcIddTOQioj9keIeuvW7gUV/4SkWxHqA0jgU5FxfthjLHSXPM0+1:oj/XQrNIv7ioBkeqvWkMRN08U53nY00w

Score

7^/10

upx

Executes dropped EXE 1 IoCs

pid	Process
2844	System64.exe

UPX packed file 5 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2196-0-0x0000000000400000-0x0000000000421000-memory.dmp	upx
behavioral1/files/0x000b000000014230-2.dat	upx
behavioral1/memory/2196-3-0x0000000000400000-0x0000000000421000-memory.dmp	upx
behavioral1/memory/2844-4-0x0000000000400000-0x0000000000421000-memory.dmp	upx
behavioral1/memory/2196-9-0x0000000000400000-0x0000000000421000-memory.dmp	upx

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\System64.exe	1c423f3fed7511f661db8e1c9f59cdb2_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\System64.exe	1c423f3fed7511f661db8e1c9f59cdb2_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\1c423f3fed7511f661db8e1c9f59cdb2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1c423f3fed7511f661db8e1c9f59cdb2_JaffaCakes118.exe"
1⤵
- Drops file in System32 directory
PID:2196

C:\Windows\SysWOW64\System64.exe
C:\Windows\SysWOW64\System64.exe
1⤵
- Executes dropped EXE
PID:2844

C:\Windows\SysWOW64\System64.exe

Filesize
42KB

MD5
1c423f3fed7511f661db8e1c9f59cdb2

SHA1
de1dad521677a628f8a877291afdfcd3a57ef729

SHA256
9f278bbba36712d08834957d9ed0ba888d38a9f6fdeb1980571ab66960b05091

SHA512
9150df8e1e71ff6e1e029b9a57deda22e7419eded378ccead2bff9c8762f81bb45b74d4a56d68fc93a484501ca8cce423188c9301e40cb16b33770360824ef41

Download Submit
memory/2196-0-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2196-3-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2196-9-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2844-4-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download