Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
12/07/2024, 15:41
General
-
Target
3df737605d199249faf5628569f81182_JaffaCakes118.exe
-
Size
139KB
-
MD5
3df737605d199249faf5628569f81182
-
SHA1
72380f08b9c6080ccf3eb51f1db2bd0bbaa1c922
-
SHA256
c6306c77beed8005a1f5c6e8d5463443ff85b0548a4ded58352a9d1b6ff85715
-
SHA512
a32c92192ff46c806a7db6871b3c334e0c47c80fde1e3dd6b03f1ff81c5c99aba254904ca17f729f0988ef08f73a8f27534afaf21fc7329a29efbc54997ea3d6
-
SSDEEP
3072:rkK9coYHtbj2uIbfBIQkyzKWyxwk3u+E3t7VlpSFa/bTu:FCoYHt32ucIQzzKpJeT3iF7
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3df737605d199249faf5628569f81182_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3df737605d199249faf5628569f81182_JaffaCakes118.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
80KB
-
Filesize
56KB
-
Filesize
80KB
-
Filesize
8KB