Analysis

  • max time kernel
    41s
  • max time network
    50s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-07-2024 06:19

General

  • Target

    24eb7fafa1f6b137c7beaec8ee3847d2_JaffaCakes118.exe

  • Size

    200KB

  • MD5

    24eb7fafa1f6b137c7beaec8ee3847d2

  • SHA1

    3501f920c8e13ccb74e6f83e146d18981ccf41d6

  • SHA256

    ce21db945c8cacbc8086ba1f393b121e7d404f99c775a9f56636282ad7f9ec11

  • SHA512

    f8af130a449e37fbeb7767e82f64e728e5cb20faca0b9461947b38df4de14a25690046f1a76989fc5fb5467b64318b909b10adebc48d14a572af8dbb19e586dd

  • SSDEEP

    3072:56Q0WA96UNCPPUYgjCYjSU4ioX8cgi2xrLR8kvVnFmgmu1bMKCu6N4ZR0Qout56:VmZiPatSU4iqFW5nHLMKCuy4ZyQoSA

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\24eb7fafa1f6b137c7beaec8ee3847d2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\24eb7fafa1f6b137c7beaec8ee3847d2_JaffaCakes118.exe"
    1⤵
      PID:2740
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2740 -s 264
        2⤵
        • Program crash
        PID:852
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2740 -ip 2740
      1⤵
        PID:5000

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2740-0-0x0000000000400000-0x000000000046B000-memory.dmp

        Filesize

        428KB

      • memory/2740-1-0x00000000004F0000-0x0000000000505000-memory.dmp

        Filesize

        84KB

      • memory/2740-2-0x0000000000400000-0x000000000046B000-memory.dmp

        Filesize

        428KB