Analysis
- max time kernel
136s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
- submitted
22/07/2024, 14:15
General
- Target 637fff940ff6f68eaa381accdc384b8c_JaffaCakes118.exe
- Size 75KB
- Sample240722-rk197aserk
- SHA256 6a762f4398f3f8d5bb017aa76356db4cd3b77c0d72394e21de2450cd30b05c02
Score
7/10
Malware Config
Signatures
- UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of UnmapMainImage 1 IoCs
- Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\637fff940ff6f68eaa381accdc384b8c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\637fff940ff6f68eaa381accdc384b8c_JaffaCakes118.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2324-0-0x0000000000400000-0x0000000000432000-memory.dmp
memory/2324-1-0x00000000006E0000-0x00000000006E2000-memory.dmp
memory/2324-4-0x0000000000400000-0x0000000000414000-memory.dmp
memory/2324-5-0x0000000000420000-0x000000000042E000-memory.dmp
memory/2324-6-0x0000000000400000-0x0000000000414000-memory.dmp