Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 06:19

General

  • Target

    24eb7fafa1f6b137c7beaec8ee3847d2_JaffaCakes118.exe

  • Size

    200KB

  • MD5

    24eb7fafa1f6b137c7beaec8ee3847d2

  • SHA1

    3501f920c8e13ccb74e6f83e146d18981ccf41d6

  • SHA256

    ce21db945c8cacbc8086ba1f393b121e7d404f99c775a9f56636282ad7f9ec11

  • SHA512

    f8af130a449e37fbeb7767e82f64e728e5cb20faca0b9461947b38df4de14a25690046f1a76989fc5fb5467b64318b909b10adebc48d14a572af8dbb19e586dd

  • SSDEEP

    3072:56Q0WA96UNCPPUYgjCYjSU4ioX8cgi2xrLR8kvVnFmgmu1bMKCu6N4ZR0Qout56:VmZiPatSU4iqFW5nHLMKCuy4ZyQoSA

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\24eb7fafa1f6b137c7beaec8ee3847d2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\24eb7fafa1f6b137c7beaec8ee3847d2_JaffaCakes118.exe"
    1⤵
      PID:848

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/848-0-0x0000000000400000-0x000000000046B000-memory.dmp

            Filesize

            428KB

          • memory/848-1-0x0000000000220000-0x0000000000235000-memory.dmp

            Filesize

            84KB

          • memory/848-2-0x0000000000400000-0x000000000046B000-memory.dmp

            Filesize

            428KB

          • memory/848-3-0x0000000000400000-0x000000000046B000-memory.dmp

            Filesize

            428KB

          • memory/848-4-0x0000000000400000-0x000000000046B000-memory.dmp

            Filesize

            428KB

          • memory/848-7-0x0000000000250000-0x0000000000251000-memory.dmp

            Filesize

            4KB

          • memory/848-5-0x0000000000250000-0x0000000000251000-memory.dmp

            Filesize

            4KB

          • memory/848-10-0x0000000000400000-0x000000000046B000-memory.dmp

            Filesize

            428KB