Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
20/06/2024, 15:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe
-
Size
13KB
-
MD5
073d1ef8ff25473846f513432e80faf6
-
SHA1
52babd97009fc42644c85cc48a4b428cd61bc71e
-
SHA256
ab3e136bc8d5802fb49c19984d721386c96b36c12478f09fd90f48ed2bd47297
-
SHA512
24ee1cfedbe224ff715d3811e7fc51f9185126aeea4af1db3a3a453a2454c7ea4093507d4cebb418e6079c1f5a7227d9ab863146db4478dd62ba92846d883b13
-
SSDEEP
384:Gv1JXN2+6fMC1U9Wi736nkFIlwwbv1ygzMp:Gj/6fMC1UwIIlwwbdyqM
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe -
Suspicious use of WriteProcessMemory 61 IoCs
description pid Process procid_target PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21 PID 1644 wrote to memory of 1216 1644 073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe 21
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵PID:1216
-
C:\Users\Admin\AppData\Local\Temp\073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\073d1ef8ff25473846f513432e80faf6_JaffaCakes118.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1644
-