ce70de643065f94e7b6017d5d075fde391c04af163486c8d74e85ba9c287aa58

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
19/06/2024, 21:39

Target

00a4a88ff00bd45164b3a3ba585c0a5d_JaffaCakes118.exe
Size

26KB
MD5

00a4a88ff00bd45164b3a3ba585c0a5d
SHA1

7d31f14d4104817a69a1a8b9f9a57f66034675a8
SHA256

ce70de643065f94e7b6017d5d075fde391c04af163486c8d74e85ba9c287aa58
SHA512

056ef9a999d9629e44eb5b618b1342ac06875d899a4b19e09ae4df82a75a4f5fa703c045a93058e755a68fe42855d1d36849f7282934acb8cc713eedac7fe677
SSDEEP

384:ABiuVkeLtFA7IJyY1ou/1fTE4iggeFW8tJI5LKd9CR7Zs2UjAR2B1n5HsWaj:4VzTAI319fmgDbTIpKd9als2OACy9j

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2036	00a4a88ff00bd45164b3a3ba585c0a5d_JaffaCakes118.exe
2036	00a4a88ff00bd45164b3a3ba585c0a5d_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 1232	2036	00a4a88ff00bd45164b3a3ba585c0a5d_JaffaCakes118.exe	21
PID 2036 wrote to memory of 1232	2036	00a4a88ff00bd45164b3a3ba585c0a5d_JaffaCakes118.exe	21
PID 2036 wrote to memory of 1232	2036	00a4a88ff00bd45164b3a3ba585c0a5d_JaffaCakes118.exe	21
PID 2036 wrote to memory of 1232	2036	00a4a88ff00bd45164b3a3ba585c0a5d_JaffaCakes118.exe	21
PID 2036 wrote to memory of 1232	2036	00a4a88ff00bd45164b3a3ba585c0a5d_JaffaCakes118.exe	21
PID 2036 wrote to memory of 1232	2036	00a4a88ff00bd45164b3a3ba585c0a5d_JaffaCakes118.exe	21

memory/1232-3-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1232-10-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2036-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2036-1-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2036-2-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2036-21-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2036-22-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download