Overview

overview

7

Static

static

7

1b2b2cbf82...18.exe

windows7-x64

7

1b2b2cbf82...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    01-07-2024 11:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1b2b2cbf8229dd847f02d06c7176e9b3_JaffaCakes118.exe

  • Size

    5.3MB

  • MD5

    1b2b2cbf8229dd847f02d06c7176e9b3

  • SHA1

    fb6cfbc3bea7c58dac5c60a357dbb14f837b744c

  • SHA256

    2efe52df7c398d92dabc42b1eca8bf96576a3f19763cc15d692bda52132123d8

  • SHA512

    e8f3c575be63798dfa0021872212d4816db635e3737b8f9f98e0966ae7b277e42e6af1a9d441842fd3a57e9ff6d57d56c7b8e3bcc18d920df424da847b564ca1

  • SSDEEP

    98304:dK5V69rPjYbyF7/YrLaG7oRrJowe7q8wUcRFIyf8BPzQtouyboe/rFBwA:dK+9rwIcfaCoVJozq9RFIyESou0Bw

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1b2b2cbf8229dd847f02d06c7176e9b3_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1b2b2cbf8229dd847f02d06c7176e9b3_JaffaCakes118.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2392-0-0x0000000000400000-0x000000000116F000-memory.dmp
    Filesize

    13.4MB

    Download
  • memory/2392-1-0x0000000075B80000-0x0000000075BC7000-memory.dmp
    Filesize

    284KB

    Download
  • memory/2392-508-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-518-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-506-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-504-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-503-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-510-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-538-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-542-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-558-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-564-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-562-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-560-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-556-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-554-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-552-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-550-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-548-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-546-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-544-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-540-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-536-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-534-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-532-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-530-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-528-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-526-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-524-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-522-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-520-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-516-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-514-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-512-0x0000000003050000-0x0000000003161000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2392-7778-0x0000000000400000-0x000000000116F000-memory.dmp
    Filesize

    13.4MB

    Download