479875899cee1c3463846f98b12deda1b6a2cd41f9d45613b730d742df674a58

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 23:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

43ae23030ffdcf546cd05190afcf4212_JaffaCakes118.exe
Size

294KB
MD5

43ae23030ffdcf546cd05190afcf4212
SHA1

029095dad9c8f5a029ac98be9afbf179fddd9dfb
SHA256

479875899cee1c3463846f98b12deda1b6a2cd41f9d45613b730d742df674a58
SHA512

9d87bfd6448b2558be80e733434ef2deb586e552f5a8047ce11afd7606cb7ca330e0fce665ba4f747ea49a4234062bd4a16557ee096865785faa64dd2fc3c808
SSDEEP

6144:Q1db49+rEg024fpLZazEjvE/rbay19tSt4bO2BaDmeBJe59kIQ:QjkArEN249AyE/rbaMct4bO2/VA

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/1000-0-0x0000000000400000-0x00000000004C1000-memory.dmp	upx
behavioral1/memory/1000-1-0x0000000000400000-0x00000000004C1000-memory.dmp	upx

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
behavioral1/memory/1000-1-0x0000000000400000-0x00000000004C1000-memory.dmp	autoit_exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\43ae23030ffdcf546cd05190afcf4212_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\43ae23030ffdcf546cd05190afcf4212_JaffaCakes118.exe"
1⤵
PID:1000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1000-0-0x0000000000400000-0x00000000004C1000-memory.dmp

Filesize
772KB

Download
memory/1000-1-0x0000000000400000-0x00000000004C1000-memory.dmp

Filesize
772KB

Download