3d227900e7c5b60716ecb5408767551922d39cba350af93107f3cf650a775ad4

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
11-07-2024 01:19

Target

372bcb28db6f4d9964bbdcd18c9d6cdd_JaffaCakes118.dll
Size

65KB
MD5

372bcb28db6f4d9964bbdcd18c9d6cdd
SHA1

655c8f19e2d27b2223c336d1ea0028dd9741e1af
SHA256

3d227900e7c5b60716ecb5408767551922d39cba350af93107f3cf650a775ad4
SHA512

f301ab18ab9b0d91706a23f3359af917dfd0ddea15ec3db06e3b2e605d9a5a82c982abc373cbde77e86580a72706fee179c07c06ce448d16ae056bfdfbaaa927
SSDEEP

1536:mPO6KEVbsVP0glE5aIy7IjWCdP7rGJxFy+x5B:cMEVbsVcL3H7i4+x5B

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2004-2-0x0000000010000000-0x000000001000D000-memory.dmp	upx
behavioral1/memory/2004-1-0x0000000010000000-0x000000001000D000-memory.dmp	upx

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 2004	2212	rundll32.exe	30
PID 2212 wrote to memory of 2004	2212	rundll32.exe	30
PID 2212 wrote to memory of 2004	2212	rundll32.exe	30
PID 2212 wrote to memory of 2004	2212	rundll32.exe	30
PID 2212 wrote to memory of 2004	2212	rundll32.exe	30
PID 2212 wrote to memory of 2004	2212	rundll32.exe	30
PID 2212 wrote to memory of 2004	2212	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\372bcb28db6f4d9964bbdcd18c9d6cdd_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\372bcb28db6f4d9964bbdcd18c9d6cdd_JaffaCakes118.dll,#1
  2⤵
  PID:2004

memory/2004-2-0x0000000010000000-0x000000001000D000-memory.dmp

Filesize
52KB

Download
memory/2004-1-0x0000000010000000-0x000000001000D000-memory.dmp

Filesize
52KB

Download
memory/2004-0-0x0000000010000000-0x000000001000D000-memory.dmp

Filesize
52KB

Download