142660cf37f16a555a0494864af629205fb969a9fa7e14101fdfc4afc305b307

Analysis

max time kernel
149s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 04:52

Target

44612f159ce7c459161b0f3f530c0a4d_JaffaCakes118.exe
Size

114KB
MD5

44612f159ce7c459161b0f3f530c0a4d
SHA1

85435b829aca76dd8b472b83f8a7d9d96e626580
SHA256

142660cf37f16a555a0494864af629205fb969a9fa7e14101fdfc4afc305b307
SHA512

2550d0e1eb8fc9a942b14357ef3a7bd55a3e0b7d42cf0c788606593171103c10533336614a98715c646816e7e46fd850e6412d9e601c07fde82d7f472f9dd09e
SSDEEP

1536:eI/Hwp6KTWcAUJs1h80e+jci/ZCl8JiGWBGwjERVzswssVzvI:RK5T1J+Ue09GWBrERFLsizA

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2660-0-0x0000000000400000-0x0000000000436000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2660	44612f159ce7c459161b0f3f530c0a4d_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2660 wrote to memory of 2756	2660	44612f159ce7c459161b0f3f530c0a4d_JaffaCakes118.exe	30
PID 2660 wrote to memory of 2756	2660	44612f159ce7c459161b0f3f530c0a4d_JaffaCakes118.exe	30
PID 2660 wrote to memory of 2756	2660	44612f159ce7c459161b0f3f530c0a4d_JaffaCakes118.exe	30
PID 2660 wrote to memory of 2756	2660	44612f159ce7c459161b0f3f530c0a4d_JaffaCakes118.exe	30
PID 2660 wrote to memory of 2756	2660	44612f159ce7c459161b0f3f530c0a4d_JaffaCakes118.exe	30
PID 2660 wrote to memory of 2756	2660	44612f159ce7c459161b0f3f530c0a4d_JaffaCakes118.exe	30
PID 2660 wrote to memory of 2756	2660	44612f159ce7c459161b0f3f530c0a4d_JaffaCakes118.exe	30

memory/2660-0-0x0000000000400000-0x0000000000436000-memory.dmp

Filesize
216KB

Download
memory/2660-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2660-1-0x0000000000230000-0x0000000000232000-memory.dmp

Filesize
8KB

Download
memory/2660-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2756-4-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2756-3-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2756-6-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2756-7-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download