Analysis

  • max time kernel
    141s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06-09-2024 19:58

General

  • Target

    d059021f68abae831059dbd55378ce22_JaffaCakes118.exe

  • Size

    12KB

  • MD5

    d059021f68abae831059dbd55378ce22

  • SHA1

    770581e2533796e13a6ef5376bc46240c5f54790

  • SHA256

    adec8433e5f43921213f014dd3cc7f8435c388f61b031b5b36dcce3708058ba4

  • SHA512

    89c4df02d1f76a28415f5708ee1906519bc5cf813a02edde6ee19ec2dd6628a9cc1e09fa630ac75eb5bae06514fbad5d6c6649e033bb134c122ddf751eb411e9

  • SSDEEP

    192:5QHikQuJRXvRwE+fnu46IqG6++ubkKL2jjPMRJirziAHyNNvlW:nk1JR/RHY1h+0B2jDMRJir+8yDvI

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d059021f68abae831059dbd55378ce22_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d059021f68abae831059dbd55378ce22_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1872-0-0x0000000000400000-0x000000000040C000-memory.dmp

    Filesize

    48KB

  • memory/1872-2-0x0000000000400000-0x000000000040C000-memory.dmp

    Filesize

    48KB