1502da95475e20fe2dcfd556ed193aa12d3d8180e49088f30672bb754edc5759

Analysis

max time kernel
140s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 09:40

Target

66d26441574921c7563c4393f49261df_JaffaCakes118.exe
Size

316KB
MD5

66d26441574921c7563c4393f49261df
SHA1

18b6390c8276653657edded81d9287fd2c39f263
SHA256

1502da95475e20fe2dcfd556ed193aa12d3d8180e49088f30672bb754edc5759
SHA512

cab3c4a78a92b4a5351993a4a767262bcfa1c246152eeb13c294ce0e087781a070ad233d64f8a57d3a4127383ec31d0abda3f1c468ea40f8b83e1a172f1f29a5
SSDEEP

6144:qdj7xw2KP9uNWKEaUx9wa3+u4nKq+PIT7kFUow7w:8K2bsPzIKPvUow7w

Score

4^/10

Drops file in Windows directory 1 IoCs

Processes:

66d26441574921c7563c4393f49261df_JaffaCakes118.exe

description ioc process

File created C:\Windows\Tasks\WalkKeeper.job 66d26441574921c7563c4393f49261df_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\Tasks\WalkKeeper.job	66d26441574921c7563c4393f49261df_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\66d26441574921c7563c4393f49261df_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\66d26441574921c7563c4393f49261df_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:2900

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4404,i,16710585221322798697,8586257254049248207,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:8
1⤵
PID:3732

memory/2900-1-0x00000000016B0000-0x00000000016B1000-memory.dmp

Filesize
4KB

Download
memory/2900-3-0x00000000016D0000-0x00000000016D1000-memory.dmp

Filesize
4KB

Download
memory/2900-2-0x00000000016C0000-0x00000000016C1000-memory.dmp

Filesize
4KB

Download
memory/2900-0-0x0000000000FF0000-0x0000000000FF1000-memory.dmp

Filesize
4KB

Download
memory/2900-4-0x00000000016E0000-0x0000000001700000-memory.dmp

Filesize
128KB

Download
memory/2900-5-0x0000000001810000-0x000000000183F000-memory.dmp

Filesize
188KB

Download
memory/2900-9-0x00000000016E0000-0x0000000001700000-memory.dmp

Filesize
128KB

Download
memory/2900-17-0x00000000016E0000-0x0000000001700000-memory.dmp

Filesize
128KB

Download