Overview

overview

7

Static

static

7

33dda0bfef...18.exe

windows7-x64

7

33dda0bfef...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    92s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/07/2024, 07:52 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    33dda0bfef5e13194c6b636f448206bf_JaffaCakes118.exe

  • Size

    1.2MB

  • MD5

    33dda0bfef5e13194c6b636f448206bf

  • SHA1

    731c80aec33fe52d20ae62b2cf9ef013bf7ccf10

  • SHA256

    0cca7d3eeb11ae0fc62a5a8baf1ad40e30d5b75d3f6c7dbf1f750ccc044be6d6

  • SHA512

    905e8c2033110faaaede51558cac364f217f021f2ecb61f61eacd0ce5c41b6e0f17573e9c167f5c8a1d32797efe4605e4cbc5b1d68a1861b5ac70d8d07d742c4

  • SSDEEP

    12288:5uq2RYX6FenJ9XT7OxLauz7KOAfqr6DRKAKMTPkBGmEz:qk+xLaK7Km6Dvk

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\33dda0bfef5e13194c6b636f448206bf_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\33dda0bfef5e13194c6b636f448206bf_JaffaCakes118.exe"
    1⤵
      PID:4016

    Network

    • flag-us
      DNS
      2.159.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      2.159.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      172.210.232.199.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      172.210.232.199.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      2.159.190.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      2.159.190.20.in-addr.arpa

    • 8.8.8.8:53
      172.210.232.199.in-addr.arpa
      dns
      74 B
       128 B
       1
      1

      DNS Request

      172.210.232.199.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4016-0-0x0000000000400000-0x0000000000569000-memory.dmp

      Filesize

      1.4MB

      Download

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.