Overview

overview

7

Static

static

7

5e409641e4...18.exe

windows7-x64

7

5e409641e4...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    141s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20-07-2024 00:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5e409641e4210672812cf10a01230372_JaffaCakes118.exe

  • Size

    156KB

  • MD5

    5e409641e4210672812cf10a01230372

  • SHA1

    6fd6f41908281c3ceceb4ad83ae8909e8c7e702b

  • SHA256

    9113bba9db64bdc7bb4b4a01eb1119b2bac47c8a1b5b229657a064ce8b378d49

  • SHA512

    e4828e9d6ebe60594d2d964b15c9644b098d425e3adf2ddb42d6ce9419da21da384b1978ca9786dd81cdc93f1f2e6503d9fad143618cfab4d1a2866f3f385f77

  • SSDEEP

    3072:Rn+HiibPx+h+6Tutgy3PI1KG1BVH/vrFo1mTSEEDFuZUDWd4PDesiToZ3bOQpj4t:B+PPxu+6atNPBG1BVSoS/DFrDWdCDoTW

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\5e409641e4210672812cf10a01230372_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5e409641e4210672812cf10a01230372_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:2948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\bassmod.dll
    Filesize

    9KB

    MD5

    780d14604d49e3c634200c523def8351

    SHA1

    e208ef6f421d2260070a9222f1f918f1de0a8eeb

    SHA256

    844eb66a10b848d3a71a8c63c35f0a01550a46d2ff8503e2ca8947978b03b4d2

    SHA512

    a49c030f11da8f0cdc4205c86bec00653ec2f8899983cad9d7195fd23255439291aaec5a7e128e1a103efd93b8566e86f15af89eba4efebf9debce14a7a5564b

    Download Submit

  • memory/2948-0-0x0000000000400000-0x0000000000474000-memory.dmp

    Filesize

    464KB

    Download

  • memory/2948-5-0x0000000000400000-0x0000000000474000-memory.dmp

    Filesize

    464KB

    Download