211b7e75b04eb1b0b86932ac953896120678d6bb7c22bf2aa441b8ebc0fd4c65

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 03:15

Target

65d1f905b8634a784d8fa648aad7a2db_JaffaCakes118.exe
Size

192KB
MD5

65d1f905b8634a784d8fa648aad7a2db
SHA1

2557d20a8efad1c4cb9d341402f011e5ead8c46d
SHA256

211b7e75b04eb1b0b86932ac953896120678d6bb7c22bf2aa441b8ebc0fd4c65
SHA512

41920054de9489674de0484c4839d18bf64ef3180382ff24a38b828f03b0219c6d7a0b1a67be58592faa1a06dfe2dd39d1af30d823753ccac2fa402d54408a5f
SSDEEP

3072:LlPPPksNEWiZ1kyKE+IKtkr93JRjwsmVUHDnXI+3gTVzyscJaQOMpAQdI6VQa:LlNiQIKtu/wDUk5JyTEMHVQa

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

65d1f905b8634a784d8fa648aad7a2db_JaffaCakes118.exe

pid process

5072 65d1f905b8634a784d8fa648aad7a2db_JaffaCakes118.exe

pid	process
5072	65d1f905b8634a784d8fa648aad7a2db_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\65d1f905b8634a784d8fa648aad7a2db_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\65d1f905b8634a784d8fa648aad7a2db_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5072