aea6d4c5fe06f4efdc9009c2deb255b30284276f6a51a6db45fab54c3c73b483

Analysis

max time kernel
141s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08/07/2024, 01:09

Target

2a7237ad31e2ff82d37ca498c1ba6993_JaffaCakes118.exe
Size

512KB
MD5

2a7237ad31e2ff82d37ca498c1ba6993
SHA1

0d5d602b28f46a5baad0deee4ebbd922b2fb2094
SHA256

aea6d4c5fe06f4efdc9009c2deb255b30284276f6a51a6db45fab54c3c73b483
SHA512

0c50de95db678aa7b68d98a3cd06f49d8b62459dd658b2b27ca3237acd646b07354d3e2c2ef285accd970621a685c99cf8ed03d4905f89c2269204b983a3429b
SSDEEP

6144:fRe9D9gAkoqItrwaSSWECoOeTgqO5i4hTChhhh5SqQrwo3VWiuHDTc5h8TQ8aIaF:fRet9REaFo3oHc5h8TVnzE

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1352-0-0x0000000000400000-0x0000000000449000-memory.dmp	upx
behavioral2/memory/1352-8-0x0000000000400000-0x0000000000449000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2a7237ad31e2ff82d37ca498c1ba6993_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2a7237ad31e2ff82d37ca498c1ba6993_JaffaCakes118.exe"
1⤵
PID:1352

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4268,i,3409420486566309625,12100452682816721435,262144 --variations-seed-version --mojo-platform-channel-handle=3900 /prefetch:8
1⤵
PID:32

memory/1352-0-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download
memory/1352-8-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download