c573f25d19c7cb610b91eb0f2a9b7389415026471580d1008630443a9e7ddf6d

Analysis

max time kernel
147s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05-04-2024 01:58

Target

c7b469cb8718c9e814fcac1ece4a6f71_JaffaCakes118.exe
Size

1.9MB
MD5

c7b469cb8718c9e814fcac1ece4a6f71
SHA1

9204b83afe782749ab76d9ed5c72f3e56ab3712a
SHA256

c573f25d19c7cb610b91eb0f2a9b7389415026471580d1008630443a9e7ddf6d
SHA512

2f392d092f9dc3a36660c236f01dccb3e1af419b9a4fa872e16e52febc6587f9ef7d5a2503fa2fca1eeab8b0cabe642c79c7c55cd788ffaeab1946cfbf5e0ec3
SSDEEP

49152:Qoa1taC070dpUlaEXpoqjvBCthkn4HY2lVsWu:Qoa1taC0mUldoqjvOgx2l+Wu

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2768	632E.tmp

Executes dropped EXE 1 IoCs

pid	Process
2768	632E.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5060 wrote to memory of 2768	5060	c7b469cb8718c9e814fcac1ece4a6f71_JaffaCakes118.exe	87
PID 5060 wrote to memory of 2768	5060	c7b469cb8718c9e814fcac1ece4a6f71_JaffaCakes118.exe	87
PID 5060 wrote to memory of 2768	5060	c7b469cb8718c9e814fcac1ece4a6f71_JaffaCakes118.exe	87

C:\Users\Admin\AppData\Local\Temp\c7b469cb8718c9e814fcac1ece4a6f71_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\c7b469cb8718c9e814fcac1ece4a6f71_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5060
- C:\Users\Admin\AppData\Local\Temp\632E.tmp
  "C:\Users\Admin\AppData\Local\Temp\632E.tmp" --splashC:\Users\Admin\AppData\Local\Temp\c7b469cb8718c9e814fcac1ece4a6f71_JaffaCakes118.exe 45533893692B8D56547E362B435B9FB24CB5ABD1B082A6243C189D7F0F73988E92AE32A87AA977A5AE5664D817A56DBE64AE283DA6B232438F9769BCFF8F7ADB
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2768

C:\Users\Admin\AppData\Local\Temp\632E.tmp

Filesize
1.9MB

MD5
2fc967bd500508798c27577025204250

SHA1
2a3ca2c738861df68ae40843456461622d557079

SHA256
689ed554f85797c51a0c4b5d2bdb0afadb4def4c6057f5e0ccb1c7823d98f51b

SHA512
d75c8f1641fc14184213a187b9f4997a875c2a6f10457e6eee1887f1394d6bd862854a16fbac08b55f13c1c81636682b0fd16603225f7c950355bb3b25e64e36

Download Submit
memory/2768-5-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download
memory/5060-0-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download