49e456db430549e427b834fd8462d60a51d10e0b060e6f56a02a99805d5e6db9

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
20/06/2024, 03:29

Target

026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe
Size

58KB
MD5

026bd4ce0cb092b5924be8e74a41df7b
SHA1

7a728d33bf225ed67cf11b834b99f13f1214b3d4
SHA256

49e456db430549e427b834fd8462d60a51d10e0b060e6f56a02a99805d5e6db9
SHA512

674569cb405ae1cd5a725d095d48d3d294a02dacf7ba735249f6224740df6f76ba9615138ef73b2acfa2e3c5d01cea00ca2f971ac197f1f030ee8ffb345ffcf1
SSDEEP

768:wRVNq/9pkEAj2KMWj6kOzeQ5wdSqkLS/Kk6zfwLa6Wr/5SIIyLoKTXvQM1qGs1UV:wLNq/8ECJj6kZSAHLIIOxX4MFs1UV

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2384 set thread context of 2256	2384	026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe	28

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2384 wrote to memory of 2256	2384	026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe	28
PID 2384 wrote to memory of 2256	2384	026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe	28
PID 2384 wrote to memory of 2256	2384	026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe	28
PID 2384 wrote to memory of 2256	2384	026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe	28
PID 2384 wrote to memory of 2256	2384	026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe	28
PID 2384 wrote to memory of 2256	2384	026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2384
- C:\Users\Admin\AppData\Local\Temp\026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\026bd4ce0cb092b5924be8e74a41df7b_JaffaCakes118.exe
  2⤵
  PID:2256

memory/2256-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2256-3-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2256-1-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2256-0-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2384-4-0x0000000010000000-0x0000000010015000-memory.dmp

Filesize
84KB

Download