580bcec2db558cf8c70ba4db01b0a67cf70a0a76418eeb298f08ea0a84d6a88b

Analysis

max time kernel
144s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
11-04-2024 16:31

Target

eddd5d18204734945983e57f34b9d713_JaffaCakes118.exe
Size

1.9MB
MD5

eddd5d18204734945983e57f34b9d713
SHA1

9fe372c7c11f3cde7208df99fb3d642e423df241
SHA256

580bcec2db558cf8c70ba4db01b0a67cf70a0a76418eeb298f08ea0a84d6a88b
SHA512

6eb602db9aba769420a6dd73fd9890e06ec860d3599a9a282b5f27717ba28cfacc70897f9ea03bd607e87e7dcc95426650a5ba6bf315f91bc9f79bc9b5de47a2
SSDEEP

49152:Qoa1taC070duNk5ylRtC4r+YuyEG+0DHtu:Qoa1taC0NNzpC4rCyj+0Dtu

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2608	4EDB.tmp

Executes dropped EXE 1 IoCs

pid	Process
2608	4EDB.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3436 wrote to memory of 2608	3436	eddd5d18204734945983e57f34b9d713_JaffaCakes118.exe	83
PID 3436 wrote to memory of 2608	3436	eddd5d18204734945983e57f34b9d713_JaffaCakes118.exe	83
PID 3436 wrote to memory of 2608	3436	eddd5d18204734945983e57f34b9d713_JaffaCakes118.exe	83

C:\Users\Admin\AppData\Local\Temp\eddd5d18204734945983e57f34b9d713_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\eddd5d18204734945983e57f34b9d713_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3436
- C:\Users\Admin\AppData\Local\Temp\4EDB.tmp
  "C:\Users\Admin\AppData\Local\Temp\4EDB.tmp" --splashC:\Users\Admin\AppData\Local\Temp\eddd5d18204734945983e57f34b9d713_JaffaCakes118.exe FC78712B81F34CBF6BB7EA325181048A52F709C4E1E3D6D5AD0D1007C30A24F7CB83D059777216F8A75AFCE3D76DDB707D88FE4797B159FD9497748F83A4E18F
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2608

C:\Users\Admin\AppData\Local\Temp\4EDB.tmp

Filesize
1.9MB

MD5
7ac3f1936fecdc34b198e7d146a9ff04

SHA1
6307bddd0b970131aed39aec7f85f6fb5bdda14e

SHA256
73777916f9c84dcd8f5d2fce434c1736fb5151ca156e318796b98525394d97fa

SHA512
cbbf6d6d0163e24e046950ab399d9021ce5200340fbbe8327d7020cd43fc981f7f35cc0a50ff3597f6fb254a44f0b102c7152045b30ad5358ebdb889ca371ecd

Download Submit
memory/2608-5-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download
memory/3436-0-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download