114a9d34b457863afde76a83c009b635957fc866a5937d846f43fe011c6b8b1b

Analysis

max time kernel
132s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 06:48

Target

6a16214775a6cb260aa0a5703cf4cd22_JaffaCakes118.exe
Size

321KB
MD5

6a16214775a6cb260aa0a5703cf4cd22
SHA1

62ae409400455194a86b22e3297abade0d3edbb7
SHA256

114a9d34b457863afde76a83c009b635957fc866a5937d846f43fe011c6b8b1b
SHA512

c7bb7ed15012c7e1c991cb1d7a587b8016c3b638dbcf0060e53d342a5f2bfbd16f2686058ef5f233583b6cf29303800883498206f75d89b2d5fc0b2c686acab9
SSDEEP

6144:cfO3lkXCRHzSZpt1k8PJp4LpceET01xjtPOC8YLyXR2:N3lk6WZPJmLpceET0bRPOC8Y42

Score

4^/10

Drops file in Windows directory 1 IoCs

Processes:

6a16214775a6cb260aa0a5703cf4cd22_JaffaCakes118.exe

description ioc process

File created C:\Windows\Tasks\TalkingBook.job 6a16214775a6cb260aa0a5703cf4cd22_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\Tasks\TalkingBook.job	6a16214775a6cb260aa0a5703cf4cd22_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\6a16214775a6cb260aa0a5703cf4cd22_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\6a16214775a6cb260aa0a5703cf4cd22_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:3856

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3416,i,13879737908471496610,15335851594401413307,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:8
1⤵
PID:2572

memory/3856-1-0x0000000001740000-0x0000000001840000-memory.dmp

Filesize
1024KB

Download
memory/3856-2-0x0000000001890000-0x00000000018BF000-memory.dmp

Filesize
188KB

Download
memory/3856-9-0x0000000001EA0000-0x0000000001EC7000-memory.dmp

Filesize
156KB

Download