27a9289b0c628edb4c9620158dcf637a6392f07d5dce43b6b0c23a27ed0a3e07

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
13-06-2024 21:19

Target

a69d34be38f7e1609c919477d5d39d9a_JaffaCakes118.exe
Size

5.9MB
MD5

a69d34be38f7e1609c919477d5d39d9a
SHA1

bbdc7c823d7d5171189a2517b7b82a03690f4b55
SHA256

27a9289b0c628edb4c9620158dcf637a6392f07d5dce43b6b0c23a27ed0a3e07
SHA512

b737eda77c0f223c7993859398e3d9b3ac801b9f87e07cabeab6c1dbf6ead970369127a59f74f8801270a847637d0ac25586ca6c5065ad147a6c3759a15acf3f
SSDEEP

98304:TXvneIttJmiQAx+TS6rK0k+PIY3bca/0Rz0g8AVcO2zI/d7j15oeJD69OLrv4:TXveyhQAY26rD7T3bca/qBaM1x0OLrv4

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1696	a69d34be38f7e1609c919477d5d39d9a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\a69d34be38f7e1609c919477d5d39d9a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a69d34be38f7e1609c919477d5d39d9a_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1696

memory/1696-4-0x00000000000F0000-0x00000000000F1000-memory.dmp

Filesize
4KB

Download
memory/1696-6-0x0000000000AF1000-0x0000000000E25000-memory.dmp

Filesize
3.2MB

Download
memory/1696-7-0x0000000000900000-0x0000000001419000-memory.dmp

Filesize
11.1MB

Download
memory/1696-2-0x00000000000F0000-0x00000000000F1000-memory.dmp

Filesize
4KB

Download
memory/1696-0-0x00000000000F0000-0x00000000000F1000-memory.dmp

Filesize
4KB

Download
memory/1696-9-0x0000000000900000-0x0000000001419000-memory.dmp

Filesize
11.1MB

Download
memory/1696-10-0x0000000000AF1000-0x0000000000E25000-memory.dmp

Filesize
3.2MB

Download
memory/1696-11-0x0000000000900000-0x0000000001419000-memory.dmp

Filesize
11.1MB

Download
memory/1696-12-0x0000000000AF1000-0x0000000000E25000-memory.dmp

Filesize
3.2MB

Download