d3dd27238261d28662bbe5bd695ad74ca36fa5652c3ae66c45554a4bf10f09c6

Analysis

max time kernel
149s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
03-07-2024 06:12

Target

2157da04f9280923920a7cad488c972f_JaffaCakes118.exe
Size

71KB
MD5

2157da04f9280923920a7cad488c972f
SHA1

08b325e9867ce380b443089ff280b23d0a1a6c5d
SHA256

d3dd27238261d28662bbe5bd695ad74ca36fa5652c3ae66c45554a4bf10f09c6
SHA512

c3efde8fa2623facaa002f7048e4336b84e31c6a29109aefea854003fca28e9a050423b55f58b65b383e9c611d8b803688109acf06669feab9c1e439a5282780
SSDEEP

1536:HdT2G9uZqKBcGPcTBHz4b0ER/lpElF8fyX62VzHl6Vf9+:FZuZqKBcGPAHEb009pEj86X62xl6p

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2244-0-0x0000000000400000-0x000000000041A000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2244	2157da04f9280923920a7cad488c972f_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 1796	2244	2157da04f9280923920a7cad488c972f_JaffaCakes118.exe	28
PID 2244 wrote to memory of 1796	2244	2157da04f9280923920a7cad488c972f_JaffaCakes118.exe	28
PID 2244 wrote to memory of 1796	2244	2157da04f9280923920a7cad488c972f_JaffaCakes118.exe	28
PID 2244 wrote to memory of 1796	2244	2157da04f9280923920a7cad488c972f_JaffaCakes118.exe	28
PID 2244 wrote to memory of 1796	2244	2157da04f9280923920a7cad488c972f_JaffaCakes118.exe	28
PID 2244 wrote to memory of 1796	2244	2157da04f9280923920a7cad488c972f_JaffaCakes118.exe	28
PID 2244 wrote to memory of 1796	2244	2157da04f9280923920a7cad488c972f_JaffaCakes118.exe	28

memory/1796-4-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1796-3-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1796-7-0x0000000000520000-0x0000000000528000-memory.dmp

Filesize
32KB

Download
memory/1796-6-0x0000000000522000-0x0000000000523000-memory.dmp

Filesize
4KB

Download
memory/2244-0-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2244-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2244-1-0x0000000000370000-0x0000000000372000-memory.dmp

Filesize
8KB

Download
memory/2244-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download