fcbdf76760206cd268dbb22b3bfd776f9709a59c7e685008268f51b6d7f34222

Analysis

max time kernel
93s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2024, 02:13

Target

47ca1bfdbed0d7679b6a0f47a46a631e_JaffaCakes118.exe
Size

564KB
MD5

47ca1bfdbed0d7679b6a0f47a46a631e
SHA1

f7658ff060fb54827e329531384c389a93a074e7
SHA256

fcbdf76760206cd268dbb22b3bfd776f9709a59c7e685008268f51b6d7f34222
SHA512

c9ecd13dafbec6f4f421ec7055241eb70c4e34fb363d1d87826679fcb909f6003c0f07c8017846e431417f94094f82fa8bd753b0484a06292b27cd304ec548a6
SSDEEP

6144:zSrhJ6r3vRs2Se+prEcv6wbJqMHoadZjVG5IZKxCbiebWIjMOxCd1vA1ZaRnz4rN:K4r/RsXeIrNVgge5kKxUfj5xCWZZsPv

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3928-0-0x0000000000400000-0x000000000048F000-memory.dmp	upx
behavioral2/memory/3928-4-0x0000000000400000-0x000000000048F000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\47ca1bfdbed0d7679b6a0f47a46a631e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\47ca1bfdbed0d7679b6a0f47a46a631e_JaffaCakes118.exe"
1⤵
PID:3928

memory/3928-0-0x0000000000400000-0x000000000048F000-memory.dmp

Filesize
572KB

Download
memory/3928-1-0x0000000002230000-0x0000000002231000-memory.dmp

Filesize
4KB

Download
memory/3928-4-0x0000000000400000-0x000000000048F000-memory.dmp

Filesize
572KB

Download