Analysis

  • max time kernel
    149s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-07-2024 10:10

General

  • Target

    67266f63e96514c90b545cf5b88c5df4_JaffaCakes118.exe

  • Size

    4KB

  • MD5

    67266f63e96514c90b545cf5b88c5df4

  • SHA1

    efb91fe8e1c99739f5b15c774aa55217fe24b34f

  • SHA256

    b7b52e96e1999785069d657442d66ef9dc06b8b4efc89da8bd74b9c89aeb1f91

  • SHA512

    f5710417f616fe003f782bb2b23d30c8daac70d0fff56b12a08668b2a171c069edcc22532266a2f67198f056989aa6ad1c280b0900fb8c2e246e872537c12510

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\67266f63e96514c90b545cf5b88c5df4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\67266f63e96514c90b545cf5b88c5df4_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4988-0-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

  • memory/4988-1-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB