Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
14-07-2024 13:34
General
-
Target
4609a1fd225b1170f06c8c52f00caead_JaffaCakes118.exe
-
Size
165KB
-
MD5
4609a1fd225b1170f06c8c52f00caead
-
SHA1
b622c9090f7377492f2eb8a5dc2439da0b4de7fe
-
SHA256
fbf394aa38a544af667d6f8ff2c5ae655335b863fbd3bc9f29f17034037f8625
-
SHA512
d28ccddf2647fdaabe5a68f52b0f452d2ad524d7545e9606262addb3d0b80efd4ecdecb5fd4f6c34344bbfd39ac7181925c604756280bab3b55a320e827f0ebf
-
SSDEEP
3072:vE7MPKkTWd7TyXA05h60EvNb3k06MOepRhc8DdiDqT/:vE74KYWRo40E5KMOepzDHT
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\4609a1fd225b1170f06c8c52f00caead_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4609a1fd225b1170f06c8c52f00caead_JaffaCakes118.exe"2⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
172KB
-
Filesize
104KB
-
Filesize
96KB