e4c827ec6031c690a13d4130d8a59b20d03cc16fdf7eaf05d1431865b8ec480a

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
28/09/2024, 19:05 UTC

Target

fcf482396fcdf87dd62e111443a8b168_JaffaCakes118.exe
Size

142KB
MD5

fcf482396fcdf87dd62e111443a8b168
SHA1

71f7e7d41f5813f5c1c7bd805d415541cd2b66ec
SHA256

e4c827ec6031c690a13d4130d8a59b20d03cc16fdf7eaf05d1431865b8ec480a
SHA512

6789d7a4a014d43c520126db82b7d222d003a5592e36706971b0fb0312edf94583b48e17441d83420447004af8b60814dfe3eb558697f2a3aeac79d41fa4fd75
SSDEEP

3072:TUoPqgsPlJyDSRD8kAnEs2H0wMx4kL/4ni4Q3jBvYj3gxwHnq:29JXD8kAnEsa9Mx4swi4Q3jBQjuwHq

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1708-0-0x0000000000400000-0x0000000001377000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\fcf482396fcdf87dd62e111443a8b168_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fcf482396fcdf87dd62e111443a8b168_JaffaCakes118.exe"
1⤵
PID:1708

memory/1708-0-0x0000000000400000-0x0000000001377000-memory.dmp

Filesize
15.5MB

Download
memory/1708-1-0x0000000000220000-0x0000000000230000-memory.dmp

Filesize
64KB

Download
memory/1708-3-0x0000000000400000-0x0000000001377000-memory.dmp

Filesize
15.5MB

Download
memory/1708-2-0x0000000000400000-0x0000000001377000-memory.dmp

Filesize
15.5MB

Download