17b19e052fec7cdc77dbd90d69507920ba0caafe962000e4d08d8ba9dcc4bcb3

Analysis

max time kernel
140s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
11/07/2024, 21:33

Target

3acacaf66d5d454fb4c3e331a35ce9c6_JaffaCakes118.exe
Size

364KB
MD5

3acacaf66d5d454fb4c3e331a35ce9c6
SHA1

82dc2a9f84f0e509219a5d1571b8c4db19d39777
SHA256

17b19e052fec7cdc77dbd90d69507920ba0caafe962000e4d08d8ba9dcc4bcb3
SHA512

8c256cd3ff326182cc064dd635a86362f37bf85f99531e8d765394f422597d357ab6f7e89f5f8bb416e4d4a4c7a9a6b11e86529c4c472072178aab474b4e9e6b
SSDEEP

6144:y+N9XDrV//ACmD4tQgcJG3VvWSgeJCxDN93NqXoa320NYOLll0QG3oSf:BNNPV3bBzcezLJC79dazNtbG3oSf

Score

7^/10

upx

UPX packed file 15 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2948-0-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-1-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-2-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-3-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-4-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-5-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-6-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-7-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-8-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-9-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-10-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-11-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-12-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-13-0x0000000000400000-0x0000000000523000-memory.dmp	upx
behavioral1/memory/2948-14-0x0000000000400000-0x0000000000523000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2948	3acacaf66d5d454fb4c3e331a35ce9c6_JaffaCakes118.exe
2948	3acacaf66d5d454fb4c3e331a35ce9c6_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\3acacaf66d5d454fb4c3e331a35ce9c6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3acacaf66d5d454fb4c3e331a35ce9c6_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2948

memory/2948-0-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-1-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-2-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-3-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-4-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-5-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-6-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-7-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-8-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-9-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-10-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-11-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-12-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-13-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download
memory/2948-14-0x0000000000400000-0x0000000000523000-memory.dmp

Filesize
1.1MB

Download