Analysis
-
max time kernel
149s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
03/07/2024, 16:34
General
-
Target
230f04b236240690627c20a998600563_JaffaCakes118.exe
-
Size
75KB
-
MD5
230f04b236240690627c20a998600563
-
SHA1
347f5b1dc6485abdc2bd6ef954cfaf52fea7f673
-
SHA256
d365d67ece0c99d536cec8dd5cb8d8509cff399f7e27c6553eec218f1ae7a719
-
SHA512
862d581cc0217fd5256a4f3812817647e35ceb9e5232ef3ad4a82f2bd4be07b71d45dc008481554e95db001320f043f8d73f5bca8ceafe90b1d59441318fa375
-
SSDEEP
1536:sN0OXUbUmQeiVbISGXEapWCHeyMTC2vo4DR3+sqScGSTh:uVg6tGXrwLbOx4DR3+tScj9
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\230f04b236240690627c20a998600563_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\230f04b236240690627c20a998600563_JaffaCakes118.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
132KB
-
Filesize
8KB
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
36KB
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
36KB