58a04e6297b04ba492b35635063036baf38f2400b6a97f5d7478b1ea388252cf

Analysis

max time kernel
149s
max time network
123s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 03:11

Target

3ff55fac92ce855efe2a9a2c707353b5_JaffaCakes118.exe
Size

90KB
MD5

3ff55fac92ce855efe2a9a2c707353b5
SHA1

09a622a79972d53d6e92591e044590c6842d4a7d
SHA256

58a04e6297b04ba492b35635063036baf38f2400b6a97f5d7478b1ea388252cf
SHA512

e9e651a1fcff4e85ad79ec688a80e587c06e72bb42bf5a7e9d2f7fddd9bc480e3a06ff4a815c1fb778319b768cd4bb1a8f3d3de7ac2218e37fd807a14904794e
SSDEEP

1536:SBmYZaDJF1K/YpWYa6Podo12VJDFNKwyjkdx3d3eTaTy90Lr+k/8nkV:SwYwDJFy2FPcoUD5z3dOmTHh/6k

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2720-0-0x0000000000400000-0x0000000000425000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2720	3ff55fac92ce855efe2a9a2c707353b5_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2720 wrote to memory of 2828	2720	3ff55fac92ce855efe2a9a2c707353b5_JaffaCakes118.exe	30
PID 2720 wrote to memory of 2828	2720	3ff55fac92ce855efe2a9a2c707353b5_JaffaCakes118.exe	30
PID 2720 wrote to memory of 2828	2720	3ff55fac92ce855efe2a9a2c707353b5_JaffaCakes118.exe	30
PID 2720 wrote to memory of 2828	2720	3ff55fac92ce855efe2a9a2c707353b5_JaffaCakes118.exe	30
PID 2720 wrote to memory of 2828	2720	3ff55fac92ce855efe2a9a2c707353b5_JaffaCakes118.exe	30
PID 2720 wrote to memory of 2828	2720	3ff55fac92ce855efe2a9a2c707353b5_JaffaCakes118.exe	30
PID 2720 wrote to memory of 2828	2720	3ff55fac92ce855efe2a9a2c707353b5_JaffaCakes118.exe	30

memory/2720-0-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download
memory/2720-1-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2720-2-0x0000000000240000-0x0000000000252000-memory.dmp

Filesize
72KB

Download
memory/2720-6-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2828-5-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2828-7-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2828-4-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2828-10-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download