33d5f240c43bc92624a52e0d33e9b7caaac71b4f742db0e6d2077f11fcee7c47

Analysis

max time kernel
149s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
06/07/2024, 14:53

Target

288e511af57201c96360222114cb8b3e_JaffaCakes118.exe
Size

115KB
MD5

288e511af57201c96360222114cb8b3e
SHA1

4656050f22f968d7c3fbba65a4ab44d54cbb4830
SHA256

33d5f240c43bc92624a52e0d33e9b7caaac71b4f742db0e6d2077f11fcee7c47
SHA512

cd5d9e2e3b2e0ecad5e363199d6615350ea94586deea178bebc989d0f875a28b482f7abe639d216718d2b9278dd1f41b2579c3d9f3eaf46a45d88740d88fa726
SSDEEP

3072:3A+TkVEEeSoug5r44rBvnxJjmr9UZqcJU:Q+Lug5nxJjlZ

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2844-0-0x0000000000400000-0x000000000043A000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2844	288e511af57201c96360222114cb8b3e_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2844 wrote to memory of 3012	2844	288e511af57201c96360222114cb8b3e_JaffaCakes118.exe	30
PID 2844 wrote to memory of 3012	2844	288e511af57201c96360222114cb8b3e_JaffaCakes118.exe	30
PID 2844 wrote to memory of 3012	2844	288e511af57201c96360222114cb8b3e_JaffaCakes118.exe	30
PID 2844 wrote to memory of 3012	2844	288e511af57201c96360222114cb8b3e_JaffaCakes118.exe	30
PID 2844 wrote to memory of 3012	2844	288e511af57201c96360222114cb8b3e_JaffaCakes118.exe	30
PID 2844 wrote to memory of 3012	2844	288e511af57201c96360222114cb8b3e_JaffaCakes118.exe	30
PID 2844 wrote to memory of 3012	2844	288e511af57201c96360222114cb8b3e_JaffaCakes118.exe	30

memory/2844-0-0x0000000000400000-0x000000000043A000-memory.dmp

Filesize
232KB

Download
memory/2844-1-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download
memory/2844-4-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3012-2-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/3012-3-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/3012-5-0x00000000002E2000-0x00000000002E3000-memory.dmp

Filesize
4KB

Download
memory/3012-6-0x00000000002E0000-0x00000000002E8000-memory.dmp

Filesize
32KB

Download