47ff54aa87d542158a0743c6309f2d77e6301b1ab0ba68510d369f51ed9696b2

Analysis

max time kernel
13s
max time network
19s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
22-02-2025 04:33

Target

JaffaCakes118_174814aaa3b1ca193ad1550cd78bc134.exe
Size

56KB
MD5

174814aaa3b1ca193ad1550cd78bc134
SHA1

d1dbd302696a749e61461f76e2244c4d70f13d3c
SHA256

47ff54aa87d542158a0743c6309f2d77e6301b1ab0ba68510d369f51ed9696b2
SHA512

6a5bcc2fe46f0fefcd8acd793e23c616a7b9fd51c5a3c543d3968ceaf616ff046fea888ff549a4876c25ecbbfbd2e6a3c284618c570e53715d96027f92edab6f
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtC:tHoLde/OgV432UcP39hXJZnC

Score

5^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/816-0-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/files/0x0007000000016d1c-5.dat	upx
behavioral1/memory/816-103-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	JaffaCakes118_174814aaa3b1ca193ad1550cd78bc134.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_174814aaa3b1ca193ad1550cd78bc134.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_174814aaa3b1ca193ad1550cd78bc134.exe"
1⤵
- Drops file in Windows directory
PID:816

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
56KB

MD5
174814aaa3b1ca193ad1550cd78bc134

SHA1
d1dbd302696a749e61461f76e2244c4d70f13d3c

SHA256
47ff54aa87d542158a0743c6309f2d77e6301b1ab0ba68510d369f51ed9696b2

SHA512
6a5bcc2fe46f0fefcd8acd793e23c616a7b9fd51c5a3c543d3968ceaf616ff046fea888ff549a4876c25ecbbfbd2e6a3c284618c570e53715d96027f92edab6f

Download Submit
memory/816-0-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/816-103-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download