95fb28369a64f0f44c94849b8e2e76f0faf35d32c372fa93ed5d4078f4338762

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 11:43

Target
91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.exe
Size 740KB
Sample240603-nv3n8aee82
SHA256 95fb28369a64f0f44c94849b8e2e76f0faf35d32c372fa93ed5d4078f4338762
MD5 91a7e7fc5c23c1bc633eaa3d52c8d694
SHA1 208dd9503936687095d0d2007a33057481b1bd92
SHA512 2adc78293f56420472f1af4b42ed9502034ede73d6d9332254deaca8153410e4f30f6c9ee2df440a0b0ba6fac3393e3308ddd0503bf561110e79d01080f7e28e
SSDEEP 12288:p2OFaMgDwvrIadBgY00tAo4oylwiEa0DUWgarjfy8kRimzct6sXpRrvMUix:p2OFRgDwvRgYTR4Oa0DbrmNRimz/ytqx
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2904	91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1004 wrote to memory of 2904	1004	91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.exe	83
PID 1004 wrote to memory of 2904	1004	91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.exe	83
PID 1004 wrote to memory of 2904	1004	91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.exe	83

C:\Users\Admin\AppData\Local\Temp\91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1004
- C:\Users\Admin\AppData\Local\Temp\is-2T0DS.tmp\91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-2T0DS.tmp\91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.tmp" /SL5="$F006A,718728,81408,C:\Users\Admin\AppData\Local\Temp\91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.exe"
  2⤵
  - Executes dropped EXE
  PID:2904

91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-2T0DS.tmp\91a7e7fc5c23c1bc633eaa3d52c8d694_JaffaCakes118.tmp
Size 56KB
SHA256 c56dbe1b720e614c4404940471e1a5148e4666ba77ef7a163b1a1c6a5a4c9d7e
MD5 32396a1493b16b58d4064e078e29aae4
SHA1 9994455388d74041a835c8ac3ea8ba287d92642c
SHA512 fa5b6588c85b0c33741e34c5329fc22503c4c7fa4823a92dedbcfe7722749ad65062f93442146ad923986c131ef51f61e176125caf1642a19f55ee490189698b
SSDEEP 768:kh3qitxsLKP7GpnQ0ZnwF0yL9FGbrJ3cMKc+5BrnyeN3H8m8gGcoO2jduKEx7y5f:U3qRLK2Q0SJWMMKcCp78gyjdUxs
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1004-0-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/1004-3-0x0000000000401000-0x000000000040B000-memory.dmp

Download

memory/1004-11-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/2904-7-0x0000000000400000-0x0000000000414000-memory.dmp

Download

memory/2904-9-0x0000000000400000-0x0000000000414000-memory.dmp

Download

memory/2904-10-0x0000000000400000-0x0000000000414000-memory.dmp

Download