3d0c9be885a58e5e4c3cecd3575be8f5ccb98c2cbfb8c12217d05ef143092690

Analysis

max time kernel
149s
max time network
150s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
08-05-2024 15:50

Target

25952e26333e061938d5414309fad1eb_JaffaCakes118.exe
Size

5.2MB
MD5

25952e26333e061938d5414309fad1eb
SHA1

b96041c53c8bccf35c9a0ed26248930afe39e2ad
SHA256

3d0c9be885a58e5e4c3cecd3575be8f5ccb98c2cbfb8c12217d05ef143092690
SHA512

067f0e75ae32c2d77cf2a44cddebf16f670e1596fd722edb29a0315f758b9b461f8412e0de86d5a58d6ea7db7eb1e89407a94840de6cfcdbf09978cba07e5cfa
SSDEEP

98304:ujwTxH55428E2SES/kGAp43hP6zW4oeES0oGU7lK7oOvVO:ujwTd5mENP/FLhPsoFSMUp+U

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3008	25952e26333e061938d5414309fad1eb_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\25952e26333e061938d5414309fad1eb_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\25952e26333e061938d5414309fad1eb_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3008

memory/3008-2-0x0000000000863000-0x0000000000A9E000-memory.dmp

Filesize
2.2MB

Download
memory/3008-3-0x0000000000400000-0x0000000000FE8000-memory.dmp

Filesize
11.9MB

Download
memory/3008-1-0x0000000000400000-0x0000000000FE8000-memory.dmp

Filesize
11.9MB

Download
memory/3008-4-0x0000000000400000-0x0000000000FE8000-memory.dmp

Filesize
11.9MB

Download
memory/3008-5-0x0000000000863000-0x0000000000A9E000-memory.dmp

Filesize
2.2MB

Download
memory/3008-6-0x0000000000400000-0x0000000000FE8000-memory.dmp

Filesize
11.9MB

Download