460a91934270e67a1105de840a43e35b550c726ebc4cedb91631720f7a336926

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
02/05/2024, 04:46

Target

0d8a49a7e487d2f2805a125cfa0931e7_JaffaCakes118.exe
Size

641KB
MD5

0d8a49a7e487d2f2805a125cfa0931e7
SHA1

49ee821b31a8e113d8816e04f53372944501d0ed
SHA256

460a91934270e67a1105de840a43e35b550c726ebc4cedb91631720f7a336926
SHA512

a572976088187e7a93cd3cddd6acf009373b3ae17a7aa001bb73d48a67019dfaea80f7db39fbe9235df745992695e33fc6d5f1028fd208e6c3d949405dbaf085
SSDEEP

12288:/Bd52bW0Aqu4vv23fmcIfwT9uob0aHX5VVYqWpIM0JbeyDir:/BdRHQ4fJwwTt0gXASM0JbeEir

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1664	0d8a49a7e487d2f2805a125cfa0931e7_JaffaCakes118.exe
1664	0d8a49a7e487d2f2805a125cfa0931e7_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0d8a49a7e487d2f2805a125cfa0931e7_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0d8a49a7e487d2f2805a125cfa0931e7_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1664

memory/1664-1-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download
memory/1664-2-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1664-3-0x0000000000401000-0x000000000049D000-memory.dmp

Filesize
624KB

Download
memory/1664-0-0x0000000000400000-0x00000000004A3000-memory.dmp

Filesize
652KB

Download
memory/1664-4-0x0000000000400000-0x00000000004A3000-memory.dmp

Filesize
652KB

Download
memory/1664-5-0x0000000000401000-0x000000000049D000-memory.dmp

Filesize
624KB

Download