Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 19:24

General

  • Target

    5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118.exe

  • Size

    30KB

  • MD5

    5d534e124deb69c5d2e7dd368591fac7

  • SHA1

    611e2744c16d0d12b760bf9e06cba1187795f2de

  • SHA256

    e3eae85fde93a08a19140a3ea78f8a542dbb841ec188ad8772aec2801b87553c

  • SHA512

    7a784e8302fd0dcee6f94b821f6a6e0c2fe217663e9e6a05d49747e8edc6b4f141843526df230a6cdf7eb4ed168019b4b0486755fc23feb359a07617876864c6

  • SSDEEP

    384:dfL9KH089nJ3zkhQj41s83xP+B6GEKD/Kx89FIZTZC:NBqvjkhf+8B+B6GrKY80

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1700

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1700-0-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB

        • memory/1700-1-0x0000000000400000-0x000000000040B000-memory.dmp

          Filesize

          44KB