Analysis
-
max time kernel
96s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
12/07/2024, 11:22
General
-
Target
3d2b2b40499f746fd8a6550e2f0cdec7_JaffaCakes118.exe
-
Size
80KB
-
MD5
3d2b2b40499f746fd8a6550e2f0cdec7
-
SHA1
c80e7e9fcba5ccb1717184892dc106ec99293425
-
SHA256
2e573f1f75639497925f20bcab9a411b6718bca2c0f1a58ed082f2c21485f16c
-
SHA512
edbf9b17914e76f3eb07207953d76d5623a9c0ccfe79d124f989d68eafd8ed447b0840685f8a33dc28f3189ade0a7f66349b5b8a1c32da935f841a9279c3d613
-
SSDEEP
1536:lg5fBHQHr/IuSGRHjuXxM7M6TEQB/hNrwcTxBwf:lodK0uZKXxMolivx
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3d2b2b40499f746fd8a6550e2f0cdec7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d2b2b40499f746fd8a6550e2f0cdec7_JaffaCakes118.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
80KB
-
Filesize
56KB
-
Filesize
80KB