Overview

overview

7

Static

static

7

3a1b26aa4d...18.exe

windows7-x64

7

3a1b26aa4d...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-07-2024 17:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3a1b26aa4df6d20f57f456b61d0bf712_JaffaCakes118.exe

  • Size

    464KB

  • MD5

    3a1b26aa4df6d20f57f456b61d0bf712

  • SHA1

    f6c1f1bc4a765f6d00e25d18d611811f879363d1

  • SHA256

    fc11beb65684e531409f3e4f075e6093dee06e0d381d7bcc6ff6cb8bf8b94666

  • SHA512

    0b54db3530eac301ff0a3b69121c7457179ce815ac9543c4e457d1d84b3bd96391f0e78a0f3aec31841abd639c8d830ebd9b3630fc60a52dedb3631d977e113f

  • SSDEEP

    12288:Z9FIaLZ0J5vMCAfw9YVoCeNMIWGOSe5S052xt16MD:Z9F7Z0Jtr9eeqsO7S056jV

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of SetThreadContext 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3a1b26aa4df6d20f57f456b61d0bf712_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3a1b26aa4df6d20f57f456b61d0bf712_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3340-0-0x0000000000400000-0x000000000054A000-memory.dmp

    Filesize

    1.3MB

    Download

  • memory/3340-3-0x0000000000400000-0x000000000054A000-memory.dmp

    Filesize

    1.3MB

    Download