110676cb06f7b44a8ee3540f902f7f59263f2cb4fc2037990f4c89975fb8d755

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
20/06/2024, 02:14

Target

01f7bb3bfcb5c32cdb63a6a34958b0a2_JaffaCakes118.dll
Size

11KB
MD5

01f7bb3bfcb5c32cdb63a6a34958b0a2
SHA1

c3858d06637a22243d6ad7f0a42d15496ef104b8
SHA256

110676cb06f7b44a8ee3540f902f7f59263f2cb4fc2037990f4c89975fb8d755
SHA512

beb4fb14761ccb704fd566a8a0f36b75878d86d9bec284ad332971b86c8547d1fafe5c7da55ed20d31e841f18cdd0cf123163db3ca0fe765863db696f3d78d38
SSDEEP

192:neB3a5eW3l0vdV+ZOfXSpYDMJUrjoaZvDqImcOKNZNJsfbVr7PbVg/zcU:CE52vDk7pYAyveImhKN6Vre1

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2124 wrote to memory of 2360	2124	rundll32.exe	28
PID 2124 wrote to memory of 2360	2124	rundll32.exe	28
PID 2124 wrote to memory of 2360	2124	rundll32.exe	28
PID 2124 wrote to memory of 2360	2124	rundll32.exe	28
PID 2124 wrote to memory of 2360	2124	rundll32.exe	28
PID 2124 wrote to memory of 2360	2124	rundll32.exe	28
PID 2124 wrote to memory of 2360	2124	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\01f7bb3bfcb5c32cdb63a6a34958b0a2_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2124
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\01f7bb3bfcb5c32cdb63a6a34958b0a2_JaffaCakes118.dll,#1
  2⤵
  PID:2360

memory/2360-4-0x00000000001B0000-0x00000000001F0000-memory.dmp

Filesize
256KB

Download
memory/2360-3-0x00000000001A4000-0x00000000001A5000-memory.dmp

Filesize
4KB

Download
memory/2360-2-0x0000000000180000-0x00000000001B4000-memory.dmp

Filesize
208KB

Download
memory/2360-1-0x0000000000180000-0x00000000001B4000-memory.dmp

Filesize
208KB

Download
memory/2360-0-0x0000000000180000-0x00000000001B4000-memory.dmp

Filesize
208KB

Download
memory/2360-5-0x0000000000180000-0x0000000000182000-memory.dmp

Filesize
8KB

Download
memory/2360-6-0x00000000001B0000-0x00000000001F0000-memory.dmp

Filesize
256KB

Download