Analysis

  • max time kernel
    141s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 15:22

General

  • Target

    3de99621ebfa95a8694c5373626f82da_JaffaCakes118.exe

  • Size

    289KB

  • MD5

    3de99621ebfa95a8694c5373626f82da

  • SHA1

    0d3c3e936b1e01118a7226bd9a5d7906939e2174

  • SHA256

    30d23f8b5cc9bb15affe0f44ba9cbe895a1aefbbc8c05c0c6a42f2907c91a06d

  • SHA512

    c84147f055c7002481f466f30c1369f428a12ae1258316a6920d9b41a41189c3b20dd92cd0012eb8208ee8628230a836f6791f5094a6de93f07424acd00717e3

  • SSDEEP

    6144:PIdZSIKh352SZmM7NGmyFakZPsAin/sRRUa2f7BGWc2p4VU:PgPLS46N4FakUn0OxgA2U

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3de99621ebfa95a8694c5373626f82da_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3de99621ebfa95a8694c5373626f82da_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2240-0-0x0000000000400000-0x00000000004C1000-memory.dmp

    Filesize

    772KB

  • memory/2240-1-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2240-2-0x0000000000400000-0x00000000004C1000-memory.dmp

    Filesize

    772KB

  • memory/2240-4-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB