Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
26/07/2024, 16:23
General
-
Target
74cf0d462afd57d604cd1ab39e1fb729_JaffaCakes118.exe
-
Size
105KB
-
MD5
74cf0d462afd57d604cd1ab39e1fb729
-
SHA1
df244937e1b0c6f9fd4060e281f76156c1b8fbed
-
SHA256
8d1fbf81765a56ac9c89e53f1ddc340dc623e95652a1c79ad98cf25ac93c3c57
-
SHA512
d6126de0f3c910f157dd28b559c9e5222c9c0a47850b8268b90fc0b11c9b5c3ac454e68b0fc439553cbecaa16420f515e5735bbd012240ec6fe5ba2df7b09fa1
-
SSDEEP
3072:2duO+5sGIMaWpIN4sfug3hQIbIy2yCJfmQqH:2duO+5szWpIogRQOISCNmQq
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\74cf0d462afd57d604cd1ab39e1fb729_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\74cf0d462afd57d604cd1ab39e1fb729_JaffaCakes118.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
300KB
-
Filesize
140KB
-
Filesize
116KB
-
Filesize
116KB