Overview

overview

7

Static

static

7

1b2b2cbf82...18.exe

windows7-x64

7

1b2b2cbf82...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    135s
  • max time network
    106s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-07-2024 11:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1b2b2cbf8229dd847f02d06c7176e9b3_JaffaCakes118.exe

  • Size

    5.3MB

  • MD5

    1b2b2cbf8229dd847f02d06c7176e9b3

  • SHA1

    fb6cfbc3bea7c58dac5c60a357dbb14f837b744c

  • SHA256

    2efe52df7c398d92dabc42b1eca8bf96576a3f19763cc15d692bda52132123d8

  • SHA512

    e8f3c575be63798dfa0021872212d4816db635e3737b8f9f98e0966ae7b277e42e6af1a9d441842fd3a57e9ff6d57d56c7b8e3bcc18d920df424da847b564ca1

  • SSDEEP

    98304:dK5V69rPjYbyF7/YrLaG7oRrJowe7q8wUcRFIyf8BPzQtouyboe/rFBwA:dK+9rwIcfaCoVJozq9RFIyESou0Bw

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect

Processes

  • C:\Users\Admin\AppData\Local\Temp\1b2b2cbf8229dd847f02d06c7176e9b3_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1b2b2cbf8229dd847f02d06c7176e9b3_JaffaCakes118.exe"
    1⤵
      PID:4136

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4136-0-0x0000000000400000-0x000000000116F000-memory.dmp
      Filesize

      13.4MB

      Download
    • memory/4136-1-0x0000000075880000-0x0000000075A95000-memory.dmp
      Filesize

      2.1MB

      Download