141ccea62a8ec20f2222de90be313173199f19446a7aa1fa8c9b480466c08a37

Analysis

max time kernel
142s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 01:48

Target
a36e817adf42d31eec92fdbcd97265b1_JaffaCakes118.exe
Size 232KB
Sample240613-b8es4atdmn
SHA256 141ccea62a8ec20f2222de90be313173199f19446a7aa1fa8c9b480466c08a37
MD5 a36e817adf42d31eec92fdbcd97265b1
SHA1 d20e413fd827f4731bae132037973b30b6330384
SHA512 c13d150664f86fce5050637e84f59e6b6cc932f9f105f4c50fcd3f3d33860862e87e81eab73b8482cc8e769dbb74f696a48679d653478fe4f9ca19cf41b45880
SSDEEP 3072:9df1kEQWtAKXbPd3huonXVZwcJaQOMpJq7OUe+gkwt:9dNkEbrPdn3vEMWe+Et
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
4160	a36e817adf42d31eec92fdbcd97265b1_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\a36e817adf42d31eec92fdbcd97265b1_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a36e817adf42d31eec92fdbcd97265b1_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3744 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:8
1⤵
PID:4956