149510ec398e5448d6154fe02ec86419f33c0234d8f0fdf6fc0791e80ae10d1a

Analysis

max time kernel
133s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 06:35

Target

6a0d746bb56f874014e4924bf3f1b966_JaffaCakes118.exe
Size

218KB
MD5

6a0d746bb56f874014e4924bf3f1b966
SHA1

b41d442d042a05652ddd80f2cdc625c7d92ed66b
SHA256

149510ec398e5448d6154fe02ec86419f33c0234d8f0fdf6fc0791e80ae10d1a
SHA512

02ac749a647316c51fee5bda3d978b65401714d08304f7fb31727c6facaf6b236232b2bb33f853b3b91738c0f4f20a404333da831a7fa9d972fec0defa0ff6d8
SSDEEP

6144:fMBxDsFk2Ujrpj1YJRPDC2mmNiinR+gM8Ir:k/D4avpj1YXDrNpRe8Ir

Score

4^/10

Drops file in Windows directory 1 IoCs

Processes:

6a0d746bb56f874014e4924bf3f1b966_JaffaCakes118.exe

description ioc process

File created C:\Windows\Tasks\OfficeTools.job 6a0d746bb56f874014e4924bf3f1b966_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\Tasks\OfficeTools.job	6a0d746bb56f874014e4924bf3f1b966_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\6a0d746bb56f874014e4924bf3f1b966_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\6a0d746bb56f874014e4924bf3f1b966_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:556

memory/556-0-0x00000000009B0000-0x00000000009B1000-memory.dmp

Filesize
4KB

Download
memory/556-2-0x00000000009E0000-0x00000000009E1000-memory.dmp

Filesize
4KB

Download
memory/556-1-0x00000000009C0000-0x00000000009C1000-memory.dmp

Filesize
4KB

Download
memory/556-3-0x0000000000FE0000-0x0000000001000000-memory.dmp

Filesize
128KB

Download
memory/556-4-0x00000000009F0000-0x00000000009F1000-memory.dmp

Filesize
4KB

Download
memory/556-5-0x0000000004570000-0x000000000459F000-memory.dmp

Filesize
188KB

Download
memory/556-9-0x0000000000FE0000-0x0000000001000000-memory.dmp

Filesize
128KB

Download
memory/556-17-0x0000000000FE0000-0x0000000001000000-memory.dmp

Filesize
128KB

Download