5a8c4049c0e4005dc517d1237e9e0263b6db3f247149e260f4e6004050c5254f

Analysis

max time kernel
150s
max time network
151s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/05/2024, 12:40

Target

71fb9e938a34ba1fae84d05f29cd577b_JaffaCakes118.exe
Size

251KB
MD5

71fb9e938a34ba1fae84d05f29cd577b
SHA1

4a68253ed05fcf9a6476307cf06952694e6a91ac
SHA256

5a8c4049c0e4005dc517d1237e9e0263b6db3f247149e260f4e6004050c5254f
SHA512

12496a63938da925f2376bc8d5f105f66e2d38ca59bc5a49f7a771b8e0b05c11d846b3abcfdb318ddb62747ca346285bc665f1618aaa1c9804a29ac6a7accf3e
SSDEEP

3072:c3uquE7K6wTKwinObMIZQCqW9vYjaXvI3f0/LZdUYKRxca61h8Hl4D1NmyHuyse2:cel1T7kObMKQCiaoEj5j8HMITeBLZm

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2860	71fb9e938a34ba1fae84d05f29cd577b_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\71fb9e938a34ba1fae84d05f29cd577b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\71fb9e938a34ba1fae84d05f29cd577b_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2860

memory/2860-9-0x0000000000080000-0x00000000000A6000-memory.dmp

Filesize
152KB

Download
memory/2860-4-0x0000000180000000-0x000000018002A000-memory.dmp

Filesize
168KB

Download
memory/2860-0-0x0000000000440000-0x0000000000468000-memory.dmp

Filesize
160KB

Download
memory/2860-11-0x0000000077490000-0x0000000077639000-memory.dmp

Filesize
1.7MB

Download
memory/2860-10-0x00000000774E1000-0x00000000774E2000-memory.dmp

Filesize
4KB

Download
memory/2860-13-0x0000000077490000-0x0000000077639000-memory.dmp

Filesize
1.7MB

Download