2abc8c3dd2d98ef038f652c9b723b3f59f3b29d1c22b9925d6468746f4fa2967

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
21-04-2024 18:54

Target

fff0f236574cd375b8887255647475c3_JaffaCakes118.exe
Size

66KB
MD5

fff0f236574cd375b8887255647475c3
SHA1

5ecf289aa4a4bba42e7b95646e7755a86d9eda7b
SHA256

2abc8c3dd2d98ef038f652c9b723b3f59f3b29d1c22b9925d6468746f4fa2967
SHA512

742b3247987e7940803f3692d30789699502bc261e761f60abfb78ba5a316ff5900639b9ce9b32514ffc1886488db662d5260661a189b111120d621b043d0fec
SSDEEP

1536:1AIAXS789rtAq0lASAFDDA9tivin1v90YSuxEOXRxkhcApAUVz0pYIMYIfYXAIw7:QIqEA8xqN2JlKQQ

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2916 wrote to memory of 3016	2916	fff0f236574cd375b8887255647475c3_JaffaCakes118.exe	28
PID 2916 wrote to memory of 3016	2916	fff0f236574cd375b8887255647475c3_JaffaCakes118.exe	28
PID 2916 wrote to memory of 3016	2916	fff0f236574cd375b8887255647475c3_JaffaCakes118.exe	28
PID 2916 wrote to memory of 3016	2916	fff0f236574cd375b8887255647475c3_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\fff0f236574cd375b8887255647475c3_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fff0f236574cd375b8887255647475c3_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2916
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 396
  2⤵
  PID:3016

memory/2916-0-0x00000000743A0000-0x000000007494B000-memory.dmp

Filesize
5.7MB

Download
memory/2916-1-0x00000000743A0000-0x000000007494B000-memory.dmp

Filesize
5.7MB

Download
memory/2916-2-0x0000000000310000-0x0000000000350000-memory.dmp

Filesize
256KB

Download
memory/2916-4-0x00000000743A0000-0x000000007494B000-memory.dmp

Filesize
5.7MB

Download
memory/2916-5-0x0000000000310000-0x0000000000350000-memory.dmp

Filesize
256KB

Download
memory/3016-3-0x0000000000340000-0x0000000000341000-memory.dmp

Filesize
4KB

Download