Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
11-07-2024 10:44
General
-
Target
38ca94339cb37b0d425788d8c718eb44_JaffaCakes118.exe
-
Size
132KB
-
MD5
38ca94339cb37b0d425788d8c718eb44
-
SHA1
79be864932eb9091abe72c06582e6ae3baa36d52
-
SHA256
f8a6cdb5fa61722286780f16f13e271a842eb660714dfaa74d274b6fe6a1e3ee
-
SHA512
e7853838b665ac2c5f59db1609a9b1d252ec82d9692759cb09ad156d1850a9dc7d161a7b0015775582db698e1f8c0375343eadc9f830cc5879d15d117a2009b7
-
SSDEEP
3072:Xq9DsYg6WG+nBxRq0JAb7rTL7VYuMUM5RBbM8out:6Bg6PaRByb7rP7V/gPpoS
Score
7/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\38ca94339cb37b0d425788d8c718eb44_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\38ca94339cb37b0d425788d8c718eb44_JaffaCakes118.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\zequowookub.exeC:\Windows\system32\zequowookub.exe2⤵
- Suspicious behavior: RenamesItself
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
168KB
-
Filesize
4KB
-
Filesize
196KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
168KB
-
Filesize
4KB
-
Filesize
196KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
196KB
-
Filesize
196KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
168KB
-
Filesize
4KB
-
Filesize
168KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB