411df464541c4fedaaf233c86b14fb135e738ef276c7fed1c170636f34709775 | Triage

Analysis

max time kernel
140s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 06:53

Sharing

Report Analysis Logs

General

Target

44c3da484a30ad43f9a751cc8b08ac9b_JaffaCakes118.exe
Size

8KB
MD5

44c3da484a30ad43f9a751cc8b08ac9b
SHA1

6f0c35b34566e3d74fc83dadf0e6bf46ab3f4fe3
SHA256

411df464541c4fedaaf233c86b14fb135e738ef276c7fed1c170636f34709775
SHA512

1307a8725c6944c80fb2d813511d4005c32409fc1665aded6b80f7a40a890d03656ee650c967660efb500248201f8747c68d1c5ea85d3222cfb98d015db8a355
SSDEEP

192:B5Pkt6KSLvw464q9W6edUA1LGuwCW43JxGP:vPkt/Sv3DKEUkbK

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2328-0-0x0000000000400000-0x000000000040A000-memory.dmp	upx

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2328	44c3da484a30ad43f9a751cc8b08ac9b_JaffaCakes118.exe
2328	44c3da484a30ad43f9a751cc8b08ac9b_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\44c3da484a30ad43f9a751cc8b08ac9b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\44c3da484a30ad43f9a751cc8b08ac9b_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2328-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download