9c66659107e6984255bcffd8dc550fa65f518c078671123fb8ee1c880ed5b95a

Analysis

max time kernel
137s
max time network
115s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19/04/2024, 13:43

Target

fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe
Size

69KB
MD5

fa6d122b2d9129cd360b1a634828f175
SHA1

7680e96f0f51c1844d97d08c77d2d5a76fac62f9
SHA256

9c66659107e6984255bcffd8dc550fa65f518c078671123fb8ee1c880ed5b95a
SHA512

dddf6b51ebcc547cf82d92a7116ca856ebc1029d7197c1ac6a09f2784aae73fb234dbb0b7af9a50a0e048fe5fd576f50783838544cfdb0cca9d5e61c0045c348
SSDEEP

1536:MpQZXcCvfA2p2nNWsyCIJJUh66voP71NVh7FhY7:EQZsufhp2UsyJJJUhU73HY7

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4920 set thread context of 3720	4920	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	83

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 4920 wrote to memory of 3720	4920	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	83
PID 4920 wrote to memory of 3720	4920	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	83
PID 4920 wrote to memory of 3720	4920	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	83
PID 4920 wrote to memory of 3720	4920	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	83
PID 4920 wrote to memory of 3720	4920	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	83
PID 4920 wrote to memory of 3720	4920	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	83
PID 4920 wrote to memory of 3720	4920	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	83
PID 3720 wrote to memory of 3512	3720	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	56
PID 3720 wrote to memory of 3512	3720	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	56
PID 3720 wrote to memory of 3512	3720	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	56
PID 3720 wrote to memory of 3512	3720	fa6d122b2d9129cd360b1a634828f175_JaffaCakes118.exe	56

memory/3512-7-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3512-8-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/3720-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3720-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3720-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3720-5-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3720-11-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3720-13-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/4920-2-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download