Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    26/07/2024, 22:25

General

  • Target

    75fb3734ae1ced3542d4a545a045911c_JaffaCakes118.exe

  • Size

    1.8MB

  • MD5

    75fb3734ae1ced3542d4a545a045911c

  • SHA1

    6545c2f4afe739e2fa3cecedb5e3e03497fe4da0

  • SHA256

    e4d1c0aec1865ad174eaf4a5d4e736431678207156f8681affd5f1a55364ae54

  • SHA512

    62e0e2eae237347e76cd3266c08bd284e10496fcc4432e415471385c03db700210a6a9826e0b0a2fa1e574e43279d60f6e1bc29a21e9caab1c2d6520d6f16ceb

  • SSDEEP

    49152:ZtdDffzfyG1c1Ukyp7yNRoBZfCWCweae/:ZtdDffzfynGp7yeBZfCBp

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\75fb3734ae1ced3542d4a545a045911c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\75fb3734ae1ced3542d4a545a045911c_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1980-0-0x00000000009E0000-0x0000000000BB7000-memory.dmp

    Filesize

    1.8MB

  • memory/1980-1-0x00000000770F0000-0x00000000770F1000-memory.dmp

    Filesize

    4KB

  • memory/1980-3-0x00000000770F0000-0x00000000770F1000-memory.dmp

    Filesize

    4KB

  • memory/1980-7-0x0000000074E80000-0x0000000074E81000-memory.dmp

    Filesize

    4KB

  • memory/1980-9-0x00000000009E0000-0x0000000000BB7000-memory.dmp

    Filesize

    1.8MB

  • memory/1980-10-0x00000000009E0000-0x0000000000BB7000-memory.dmp

    Filesize

    1.8MB