Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 20:23

General

  • Target

    363eac4bea15e03e044fb8a49a0f867e_JaffaCakes118.exe

  • Size

    53KB

  • MD5

    363eac4bea15e03e044fb8a49a0f867e

  • SHA1

    3239c73ace35736e15d257f5c67e5175573fc84e

  • SHA256

    6aeec4f0dcec2e9e2ab50747258f0b2526148d5ef1babeb9af8e36ce0db993d2

  • SHA512

    5100de03695d43075d41e8bca98f4e89d66b0fc00ae4f6f23890166f528262781f9a0ab27cda02494d5ad7d8811f5cec389c5e106a9d355b08d409daa92cc04e

  • SSDEEP

    1536:v6VvpDOrbJI+zIRGv8D7DUdowJlH+Vfq:vSRDsNIRcAiNl

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\363eac4bea15e03e044fb8a49a0f867e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\363eac4bea15e03e044fb8a49a0f867e_JaffaCakes118.exe"
    1⤵
      PID:1820

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1820-0-0x00000000000C0000-0x00000000000E1000-memory.dmp

            Filesize

            132KB

          • memory/1820-1-0x00000000000C0000-0x00000000000E1000-memory.dmp

            Filesize

            132KB

          • memory/1820-3-0x00000000000C0000-0x00000000000E1000-memory.dmp

            Filesize

            132KB