1380b2482c9c027b98be4de61aacdeacf7080acf128178b0251ffd61a3736ee7

Analysis

max time kernel
67s
max time network
52s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
27-04-2024 22:18

Target

03c078d2d9731bdc55c450330a24e10b_JaffaCakes118.exe
Size

315KB
MD5

03c078d2d9731bdc55c450330a24e10b
SHA1

c02d017c94db5d375e6e90cab795cb8adbd25193
SHA256

1380b2482c9c027b98be4de61aacdeacf7080acf128178b0251ffd61a3736ee7
SHA512

10297d668da10be3987ff0608785c140e903ffa34d2960fe2a5291289ecffe4e632fdea26d8d712dd4663cf5935350ef381abd58c4c7935d77fd04091378445a
SSDEEP

6144:MPEfqkCQLK4JXyO8rwOii1HmaHFbkcwsz2nR/60:pikS4JXFfiZflbl2nd60

Score

4^/10

Drops file in Windows directory 1 IoCs

Processes:

03c078d2d9731bdc55c450330a24e10b_JaffaCakes118.exe

description ioc process

File created C:\Windows\Tasks\WalkingBuddy.job 03c078d2d9731bdc55c450330a24e10b_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\Tasks\WalkingBuddy.job	03c078d2d9731bdc55c450330a24e10b_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\03c078d2d9731bdc55c450330a24e10b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\03c078d2d9731bdc55c450330a24e10b_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:4164

memory/4164-3-0x00000000006F0000-0x00000000006F1000-memory.dmp

Filesize
4KB

Download
memory/4164-1-0x00000000006D0000-0x00000000006D1000-memory.dmp

Filesize
4KB

Download
memory/4164-2-0x00000000006E0000-0x00000000006E1000-memory.dmp

Filesize
4KB

Download
memory/4164-0-0x00000000006C0000-0x00000000006C1000-memory.dmp

Filesize
4KB

Download
memory/4164-4-0x0000000000700000-0x0000000000720000-memory.dmp

Filesize
128KB

Download
memory/4164-9-0x0000000000700000-0x0000000000720000-memory.dmp

Filesize
128KB

Download
memory/4164-5-0x0000000001A50000-0x0000000001A7F000-memory.dmp

Filesize
188KB

Download
memory/4164-17-0x0000000000700000-0x0000000000720000-memory.dmp

Filesize
128KB

Download