Analysis

  • max time kernel
    140s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/07/2024, 02:01

General

  • Target

    47c0b9cea6f14c97f691c04eabc529c9_JaffaCakes118.exe

  • Size

    432KB

  • MD5

    47c0b9cea6f14c97f691c04eabc529c9

  • SHA1

    50eb30fd9220c65c64704feb9620f480fe18f1e1

  • SHA256

    438767f50a555a5f1e910572fbdd027d5e7104e2354f2e63e782f3d372756aed

  • SHA512

    15c18f4c867b2095703f3c4392b0785ae69f88d4c65b8a1fa7a5a8c2d5f53cac08eea08c33618f33221625deeaad3d20f39cbab0f771ae0b7c5626bfb60ed302

  • SSDEEP

    12288:h1uvz1flKZ9nn4LTWLZ/VsZPH7JrFsW6/Nqg:hovz1wDsTWGPlrFsW6/Nq

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\47c0b9cea6f14c97f691c04eabc529c9_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\47c0b9cea6f14c97f691c04eabc529c9_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3516-0-0x0000000000400000-0x00000000004F7000-memory.dmp

    Filesize

    988KB

  • memory/3516-1-0x0000000000B10000-0x0000000000B11000-memory.dmp

    Filesize

    4KB

  • memory/3516-2-0x0000000000400000-0x00000000004F7000-memory.dmp

    Filesize

    988KB

  • memory/3516-4-0x0000000000B10000-0x0000000000B11000-memory.dmp

    Filesize

    4KB