6dfbe292ba04df4c30f0c5b6c339c8dbeb5af4b8ae5d2c223f255c3f257cc60e

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
16/07/2024, 02:06

Target

4c6016a1e78ed417b97a55fcdde9c878_JaffaCakes118.exe
Size

291KB
MD5

4c6016a1e78ed417b97a55fcdde9c878
SHA1

65653b0ae82789258ab3cf1b24af00132b084399
SHA256

6dfbe292ba04df4c30f0c5b6c339c8dbeb5af4b8ae5d2c223f255c3f257cc60e
SHA512

b4cd6d988d982b162ce067a019fb2907347cafbd06e6c758c20443b9ea446561f5ad14c238c7444ba35393d2ac0a9bd4ce643cf36d419531ead698d948fd3138
SSDEEP

6144:5EzHvgkBh3jk/RSPz7u77kgpPOtuguyMgwgsMF7iyz:SIkB+4ophg5MgwDEiyz

Score

7^/10

upx

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2724-1-0x0000000000400000-0x0000000000469000-memory.dmp	upx
behavioral1/memory/2724-2-0x0000000000400000-0x0000000000469040-memory.dmp	upx
behavioral1/memory/2724-3-0x0000000000400000-0x0000000000469040-memory.dmp	upx
behavioral1/memory/2724-4-0x0000000000400000-0x0000000000469000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\4c6016a1e78ed417b97a55fcdde9c878_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4c6016a1e78ed417b97a55fcdde9c878_JaffaCakes118.exe"
1⤵
PID:2724

memory/2724-1-0x0000000000400000-0x0000000000469000-memory.dmp

Filesize
420KB

Download
memory/2724-2-0x0000000000400000-0x0000000000469040-memory.dmp

Filesize
420KB

Download
memory/2724-3-0x0000000000400000-0x0000000000469040-memory.dmp

Filesize
420KB

Download
memory/2724-4-0x0000000000400000-0x0000000000469000-memory.dmp

Filesize
420KB

Download