774e12aab0679339414153a521285f7585a0f74e7bb877ad2c16c4b08c3e4c8f

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
21/04/2024, 10:58

Target

ff1fee50c3cdef6795e4f68cd0296852_JaffaCakes118.dll
Size

94KB
MD5

ff1fee50c3cdef6795e4f68cd0296852
SHA1

47d7c05705b4f25f2072c4f35e650929cc3177ec
SHA256

774e12aab0679339414153a521285f7585a0f74e7bb877ad2c16c4b08c3e4c8f
SHA512

c10d536de4962f11240fab87140acb5f52e43d5bd2ee78b5cc6bea16d5feec94f53a08422d3279fe84065311811d5bda200a7fa1cd7cb64d8a4439747d4b49b5
SSDEEP

1536:4Nirtd37OOZNLmwTvhfYxOypfK9IHmS9jna2Zh7m0X07S86LorpID9Vl/tlOa:nJd37OOxLhfYQy2IHfjna2Zh7F/8Nrp0

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2380	rundll32.exe
2380	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2380	2360	rundll32.exe	28
PID 2360 wrote to memory of 2380	2360	rundll32.exe	28
PID 2360 wrote to memory of 2380	2360	rundll32.exe	28
PID 2360 wrote to memory of 2380	2360	rundll32.exe	28
PID 2360 wrote to memory of 2380	2360	rundll32.exe	28
PID 2360 wrote to memory of 2380	2360	rundll32.exe	28
PID 2360 wrote to memory of 2380	2360	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ff1fee50c3cdef6795e4f68cd0296852_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ff1fee50c3cdef6795e4f68cd0296852_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2380

memory/2380-0-0x0000000010000000-0x000000001002B000-memory.dmp

Filesize
172KB

Download
memory/2380-1-0x0000000010000000-0x000000001002B000-memory.dmp

Filesize
172KB

Download
memory/2380-2-0x0000000010000000-0x000000001002B000-memory.dmp

Filesize
172KB

Download
memory/2380-3-0x0000000010000000-0x000000001002B000-memory.dmp

Filesize
172KB

Download
memory/2380-4-0x0000000010000000-0x000000001002B000-memory.dmp

Filesize
172KB

Download