Analysis
-
max time kernel
137s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
19-06-2024 20:58
Behavioral task
behavioral1
Sample
0077b200e4057a183603bcc2d3403e5d_JaffaCakes118.dll
Resource
win7-20240508-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0077b200e4057a183603bcc2d3403e5d_JaffaCakes118.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0077b200e4057a183603bcc2d3403e5d_JaffaCakes118.dll
-
Size
216KB
-
MD5
0077b200e4057a183603bcc2d3403e5d
-
SHA1
9243b803bb1e77a3b4420fe555e09099210238a1
-
SHA256
0f74d830071bd375c7228d943e93ab2c4fe0ade6168640abdd1b62a9c684a9c2
-
SHA512
869f7b0e93cb06f68285b1c9c3928b9e229e98da5914d5c63c78e9677b7ba9a11528364b078abd994238570988048ae50bb2ff963b2f246315b70e8f46f2bf38
-
SSDEEP
3072:jkG6s4mal+3SWAjVyz8QI17ekQmehyHLvUk0rOqcfXkkCXW1sLea9ImPtG16Jg/K:jys4mXzNz8J3vUkYOTc4sz9hG1a
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 2484 wrote to memory of 3668 2484 rundll32.exe rundll32.exe PID 2484 wrote to memory of 3668 2484 rundll32.exe rundll32.exe PID 2484 wrote to memory of 3668 2484 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0077b200e4057a183603bcc2d3403e5d_JaffaCakes118.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0077b200e4057a183603bcc2d3403e5d_JaffaCakes118.dll,#12⤵