e58785d28ff2169a38dcca4c47e57d967cd3bfc508cb3e1dedd37a555c4bae2e

Analysis

max time kernel
137s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/04/2024, 08:23

Target

eaa5246f9a9dc115d7939b7636b682cb_JaffaCakes118.exe
Size

139KB
MD5

eaa5246f9a9dc115d7939b7636b682cb
SHA1

e844b61abc99e82d5e9fa8f9febf61b2f895ed01
SHA256

e58785d28ff2169a38dcca4c47e57d967cd3bfc508cb3e1dedd37a555c4bae2e
SHA512

d5aabbb696ae5645fd81cb2fb15be67f22e0b45a91adb86beeebaae0386d6d0635960f9721471808d5f6a6c0f2393461875cfc8b59a333d25d1999d98e33bd85
SSDEEP

3072:3Dr7a0seyUpc3V0HzAhUkPiVpipJec/IMcK4i3JvGoXyE9xqH:3f7YeyUpc3VizWUkzwm4FB

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 2224	1996	eaa5246f9a9dc115d7939b7636b682cb_JaffaCakes118.exe	94
PID 1996 wrote to memory of 2224	1996	eaa5246f9a9dc115d7939b7636b682cb_JaffaCakes118.exe	94
PID 1996 wrote to memory of 2224	1996	eaa5246f9a9dc115d7939b7636b682cb_JaffaCakes118.exe	94

C:\Users\Admin\AppData\Local\Temp\eaa5246f9a9dc115d7939b7636b682cb_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\eaa5246f9a9dc115d7939b7636b682cb_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Users\Admin\AppData\Local\Temp\eaa5246f9a9dc115d7939b7636b682cb_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\eaa5246f9a9dc115d7939b7636b682cb_JaffaCakes118.exe -deleter
  2⤵
  PID:2224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5164 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:8
1⤵
PID:884