Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/07/2024, 13:50

General

  • Target

    49f40c0056c25ba6aad33ae1fc249145_JaffaCakes118.exe

  • Size

    306KB

  • MD5

    49f40c0056c25ba6aad33ae1fc249145

  • SHA1

    3ba13d4da30ae4ba653f89d764196a126ab1d97c

  • SHA256

    7b570923a4aae70cafc421abee8e4f06d63fcf8818125ad00de46f938b4ec158

  • SHA512

    e204389d05994eadf98e4f7c22baa8ddcdb3eb3085b8a4012a02cb00edc99d78b5886a25149636a1a58d67a8aa1b44cf294eaa295e97a70a1a50562b3a22f243

  • SSDEEP

    6144:uhdnr1a1vUxAlzfA5yyTtVjZnP5CIRVJi5mVFXLTXEMl7GYYaUoSLYb:qdnr1LQGPTBPsIRVJi5mV9TibaUoSsb

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 15 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\49f40c0056c25ba6aad33ae1fc249145_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\49f40c0056c25ba6aad33ae1fc249145_JaffaCakes118.exe"
    1⤵
      PID:2576

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2576-0-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-1-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-2-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-3-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-4-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-5-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-6-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-7-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-8-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-9-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-10-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-11-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-12-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-13-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB

          • memory/2576-14-0x0000000000400000-0x00000000004F1000-memory.dmp

            Filesize

            964KB