649f35aa34bafae2b806ef2a827e9d8381bacf7980ede74ff3f22ddc9cfda19d

Analysis

max time kernel
141s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
03/07/2024, 02:45

Target

20d129cd22bc394517c044ae1e074a82_JaffaCakes118.exe
Size

10KB
MD5

20d129cd22bc394517c044ae1e074a82
SHA1

d25cb9ee153df64c085b7c7798a0d3797ca55b7f
SHA256

649f35aa34bafae2b806ef2a827e9d8381bacf7980ede74ff3f22ddc9cfda19d
SHA512

e284a844a24b7286be7703f8ead4bbf6f164caf524960009c307169d382d3d17b9d1ffb8305b9320286fe4249dc29722f86bd59e9ac2caa79fe49b1a8c7de359
SSDEEP

192:nRm26rpAsecym8GK+A34ZXh2yp6Gc6NBzKYNwSk0GuwXQpnc0do7KcVR2BcNPUI:RupCcym8GK+A34zp6rUBhNwSlwX2c0eH

Score

7^/10

upx

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\win.exe	20d129cd22bc394517c044ae1e074a82_JaffaCakes118.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\win.exe	20d129cd22bc394517c044ae1e074a82_JaffaCakes118.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2456-0-0x0000000000400000-0x000000000040E000-memory.dmp	upx
behavioral2/memory/2456-2-0x0000000000400000-0x000000000040E000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\20d129cd22bc394517c044ae1e074a82_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\20d129cd22bc394517c044ae1e074a82_JaffaCakes118.exe"
1⤵
- Drops startup file
PID:2456

memory/2456-0-0x0000000000400000-0x000000000040E000-memory.dmp

Filesize
56KB

Download
memory/2456-2-0x0000000000400000-0x000000000040E000-memory.dmp

Filesize
56KB

Download