1650164239f54a65026f30741ea845215397f493eb8d153b7f19c9ddcbbd6e4f

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
02-06-2024 03:53

Target

8cceb625fcadf4a52de2ca8b0fb850f2_JaffaCakes118.exe
Size

112KB
MD5

8cceb625fcadf4a52de2ca8b0fb850f2
SHA1

45fbe46ca5200271cb1776894aa487128766196e
SHA256

1650164239f54a65026f30741ea845215397f493eb8d153b7f19c9ddcbbd6e4f
SHA512

b29636ec0d367cf4ad1bef45ef7619e1aa670e62cbb96b3bf4545660644984e25d54f2e0e36bb49122b30769e6dc1dd6d22ff5cb7cd17da2a64ff8b425d7354d
SSDEEP

1536:3pQnbaSH5ISHszVH/CZyEzGT05i7vxDiaQJ86GAYNn82xMvVTskgMxmjvOpGns:3pQ2C8uzegY9iaQJ8VAS5iWMUjOpys

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3028 wrote to memory of 2296	3028	8cceb625fcadf4a52de2ca8b0fb850f2_JaffaCakes118.exe	28
PID 3028 wrote to memory of 2296	3028	8cceb625fcadf4a52de2ca8b0fb850f2_JaffaCakes118.exe	28
PID 3028 wrote to memory of 2296	3028	8cceb625fcadf4a52de2ca8b0fb850f2_JaffaCakes118.exe	28
PID 3028 wrote to memory of 2296	3028	8cceb625fcadf4a52de2ca8b0fb850f2_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\8cceb625fcadf4a52de2ca8b0fb850f2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\8cceb625fcadf4a52de2ca8b0fb850f2_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3028
- C:\Users\Admin\AppData\Local\Temp\8cceb625fcadf4a52de2ca8b0fb850f2_JaffaCakes118.exe
  ?
  2⤵
  PID:2296

memory/2296-7-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2296-8-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2296-16-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2296-12-0x0000000010000000-0x000000001000C000-memory.dmp

Filesize
48KB

Download
memory/3028-0-0x0000000000401000-0x0000000000408000-memory.dmp

Filesize
28KB

Download
memory/3028-1-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/3028-6-0x0000000000401000-0x0000000000408000-memory.dmp

Filesize
28KB

Download
memory/3028-5-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download