Overview

overview

9

Static

static

9

436c0a457b...18.exe

windows7-x64

1

436c0a457b...18.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    94s
  • max time network
    106s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-07-2024 21:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    436c0a457b62ddafb047083e98e01af6_JaffaCakes118.exe

  • Size

    4.0MB

  • MD5

    436c0a457b62ddafb047083e98e01af6

  • SHA1

    f7fe582905cad05480b61f1f673fd3aa528c8a0b

  • SHA256

    d5850fa60980643447638cbc80ac1eaf2c045b91af7530ac405a85239fbbe0f3

  • SHA512

    3693292b3054ce778a4d09a5499813778d9d2cb3d6db994f373658875afedef1c5b55b99420bea7e5fbf059733d5640a92bc7b1c420a211c9d394c7fcac407f4

  • SSDEEP

    49152:xuDEfnwnShywexlDZh3mithOXBK8afR9ZUIIXGm3bQAv25U7Djot/lX3RTv:sDEfnwnSAldhTOe9OII33bNet/h3

Score
9/10
cryptonepacker

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

    cryptonepacker

Processes

  • C:\Users\Admin\AppData\Local\Temp\436c0a457b62ddafb047083e98e01af6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\436c0a457b62ddafb047083e98e01af6_JaffaCakes118.exe"
    1⤵
      PID:3720

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3720-0-0x0000000000400000-0x00000000007FC000-memory.dmp

      Filesize

      4.0MB

      Download