Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    10/08/2024, 01:48

General

  • Target

    845df3e21b80d1777683d0619ee3a858_JaffaCakes118.exe

  • Size

    334KB

  • MD5

    845df3e21b80d1777683d0619ee3a858

  • SHA1

    fdf06e757ad708d0ac8706a40c0f86b506198d5b

  • SHA256

    431b3bb0d3d5520aad1ec26f0e80db1bca4bf965c270449a00dacd76fc1f29fd

  • SHA512

    6cd678036b866045c084d991a8d32d6646703a813542812dcbf1c44abeae8ba7a1dc909d8c4ac4cb1be456e45ce6d0c7dce8075aaa6575c3f6d34a2f51b7932b

  • SSDEEP

    6144:/6oHRKXES7qX+1f7nepTrYydsVXcj2q5GcRdGe/zbFEpZIZv3SJqaOzFUpwTB:ETlnkTrY9K35NN/a7eacaOxQwTB

Score
7/10

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\845df3e21b80d1777683d0619ee3a858_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\845df3e21b80d1777683d0619ee3a858_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2696

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2696-0-0x0000000000400000-0x0000000000485000-memory.dmp

    Filesize

    532KB

  • memory/2696-9-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2696-8-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2696-6-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2696-5-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2696-4-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2696-3-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2696-2-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2696-1-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2696-7-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB

  • memory/2696-11-0x0000000000400000-0x0000000000485000-memory.dmp

    Filesize

    532KB

  • memory/2696-12-0x000000007EF50000-0x000000007EFAC000-memory.dmp

    Filesize

    368KB