14992251b36c8d950e62dbe7e67037a3719929cefc18712ece07383db422b3e7

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
17/04/2024, 15:37

Target

f61b879fc898ee2acc175b84a2ba4981_JaffaCakes118.exe
Size

2.1MB
MD5

f61b879fc898ee2acc175b84a2ba4981
SHA1

dbfcef77791c5232f250011e402a32d8d0916c56
SHA256

14992251b36c8d950e62dbe7e67037a3719929cefc18712ece07383db422b3e7
SHA512

be2f5e368915ab2ed25a07220e71df957f403671dd280636782ca42599eb32646962d2d6961bd80e9c117127dcf1bf1fd862f8f437caa3301340c14d991305f3
SSDEEP

49152:DscQSukYrF4ac0pUrFb8MHyy03lbObp3hl3:DseYrq30p6HpyVO9333

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2416	f61b879fc898ee2acc175b84a2ba4981_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f61b879fc898ee2acc175b84a2ba4981_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f61b879fc898ee2acc175b84a2ba4981_JaffaCakes118.exe"
1⤵
- Suspicious use of UnmapMainImage
PID:2416

memory/2416-0-0x00000000001E0000-0x00000000001E5000-memory.dmp

Filesize
20KB

Download
memory/2416-2-0x0000000002100000-0x00000000022FA000-memory.dmp

Filesize
2.0MB

Download
memory/2416-1-0x0000000000400000-0x00000000005FC000-memory.dmp

Filesize
2.0MB

Download
memory/2416-3-0x0000000000400000-0x00000000005FC000-memory.dmp

Filesize
2.0MB

Download
memory/2416-7-0x0000000000400000-0x00000000005FC000-memory.dmp

Filesize
2.0MB

Download
memory/2416-6-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/2416-8-0x0000000000400000-0x00000000005FC000-memory.dmp

Filesize
2.0MB

Download
memory/2416-13-0x00000000001E0000-0x00000000001E5000-memory.dmp

Filesize
20KB

Download
memory/2416-35-0x0000000000400000-0x00000000005FC000-memory.dmp

Filesize
2.0MB

Download
memory/2416-36-0x0000000000400000-0x00000000005FC000-memory.dmp

Filesize
2.0MB

Download
memory/2416-40-0x0000000000400000-0x00000000005FC000-memory.dmp

Filesize
2.0MB

Download