118a3f80916bbead63d4aa0ce3b83349f8d2039a5034c1106ad3a822dc40e732

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 20:45

Target

81dca09aa23c8aca7536a5755c303e05_JaffaCakes118.exe
Size

259KB
MD5

81dca09aa23c8aca7536a5755c303e05
SHA1

251d363899db908f8e18e41fcb56dd21f7137735
SHA256

118a3f80916bbead63d4aa0ce3b83349f8d2039a5034c1106ad3a822dc40e732
SHA512

f0f44a6f0ab06081330a251c7bcdffea95aa19a6f2251a8ee931628d7d68d29e60605a5959b85a29efdb54236163b0ed7f977ff6556247f260ad9f93230ed10c
SSDEEP

6144:u127m51INly4PJhtleVyn7APe+Er/cgHn:lm1YfTtUVyMjEr/cgHn

Score

4^/10

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\LearningBuddy.job	81dca09aa23c8aca7536a5755c303e05_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\81dca09aa23c8aca7536a5755c303e05_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\81dca09aa23c8aca7536a5755c303e05_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:4596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1340 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:8
1⤵
PID:3468

memory/4596-1-0x0000000000F60000-0x0000000000F70000-memory.dmp

Filesize
64KB

Download
memory/4596-0-0x0000000000F70000-0x0000000000F80000-memory.dmp

Filesize
64KB

Download
memory/4596-2-0x0000000000F80000-0x0000000000FA9000-memory.dmp

Filesize
164KB

Download
memory/4596-7-0x0000000000F80000-0x0000000000FA9000-memory.dmp

Filesize
164KB

Download
memory/4596-3-0x0000000002870000-0x000000000289F000-memory.dmp

Filesize
188KB

Download
memory/4596-11-0x0000000005870000-0x0000000005897000-memory.dmp

Filesize
156KB

Download
memory/4596-14-0x0000000000F80000-0x0000000000FA9000-memory.dmp

Filesize
164KB

Download
memory/4596-16-0x0000000000F80000-0x0000000000FA9000-memory.dmp

Filesize
164KB

Download
memory/4596-23-0x0000000000F80000-0x0000000000FA9000-memory.dmp

Filesize
164KB

Download