Analysis

  • max time kernel
    141s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20/07/2024, 06:38

General

  • Target

    5f67db78dbbfbb9a252640ba3cbb58a2_JaffaCakes118.exe

  • Size

    324KB

  • MD5

    5f67db78dbbfbb9a252640ba3cbb58a2

  • SHA1

    47b8baa9d055ac5fdb76c144de54fbc87f9d28df

  • SHA256

    df9330f6326fa8a49d2f79bbcee402e903e4627d852ad203f060e1cca4170cc3

  • SHA512

    2f4371a8d9fb2959e5c0cefcd6e90953a04b2b60c21237f11ee2f50af6f517f5af0fef61ae039a98c321e8839c7918685c307db0aa3787fa03beb4cb860c51e5

  • SSDEEP

    6144:GgtmtlV5D4zwURRFWOEo0VOCs3vjY6b+MG30sCPE0W9CkAE+7bMdvHxkKA7vKZw5:rtmtX5szfRFkWfjY0+MG3XCPE0Pkvqos

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\5f67db78dbbfbb9a252640ba3cbb58a2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5f67db78dbbfbb9a252640ba3cbb58a2_JaffaCakes118.exe"
    1⤵
      PID:2692

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2692-0-0x0000000000400000-0x00000000004C5000-memory.dmp

      Filesize

      788KB

    • memory/2692-1-0x0000000000230000-0x0000000000231000-memory.dmp

      Filesize

      4KB

    • memory/2692-2-0x0000000000400000-0x00000000004C5000-memory.dmp

      Filesize

      788KB

    • memory/2692-4-0x0000000000230000-0x0000000000231000-memory.dmp

      Filesize

      4KB