280420100ab565c287e1104d1ae65f5a26083d10f79c18edf74d93b37bb7ed26

Analysis

max time kernel
125s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 01:59

Target

2e9c3296f15b50e61108bf58fa977872_JaffaCakes118.dll
Size

73KB
MD5

2e9c3296f15b50e61108bf58fa977872
SHA1

d0691b658221e2ecbefe690896c0ce0e6971dca1
SHA256

280420100ab565c287e1104d1ae65f5a26083d10f79c18edf74d93b37bb7ed26
SHA512

902a7adefed1fe4d290ae8b3ea3d8dc59f97ed54f921d9cd94772efb55771146973f5e827074c1237afb6cc7ff9cd048608a0d28a315805b52395a6b99bb45aa
SSDEEP

1536:68C3PjhLOIqJIbOTI3esLFgf4yc/tm+YwbXMWHjzQbcFEo:68APjXqZI3hJgf4yc/4+YoXMWXBEo

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3736-0-0x0000000010000000-0x0000000010017000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4584 wrote to memory of 3736	4584	rundll32.exe	89
PID 4584 wrote to memory of 3736	4584	rundll32.exe	89
PID 4584 wrote to memory of 3736	4584	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2e9c3296f15b50e61108bf58fa977872_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4584
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\2e9c3296f15b50e61108bf58fa977872_JaffaCakes118.dll,#1
  2⤵
  PID:3736

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3824,i,8810623976767776473,12198967845557146846,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:8
1⤵
PID:5104

memory/3736-0-0x0000000010000000-0x0000000010017000-memory.dmp

Filesize
92KB

Download