fa101d2bd99def30bb61b527558b53d7209345e80f92b6abf4cfd60f5f3d6420

Analysis

max time kernel
149s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
20/06/2024, 15:59

Target
078478fee8031a70d002140b660497fe_JaffaCakes118.exe
Size 1.2MB
Sample240620-te14cawbpb
SHA256 fa101d2bd99def30bb61b527558b53d7209345e80f92b6abf4cfd60f5f3d6420
MD5 078478fee8031a70d002140b660497fe
SHA1 106d693c1b12cd3a8ffed49a8c4b6af7fe29a865
SHA512 df3724fb05819e6fc5e0d923db1325ff2e15f2ee78fb38481bd8653bd48bd50b2daca1166cfa61d8cd38ac710ee800e76a69e4710c6f9bc96cef22c04ef49203
SSDEEP 24576:D73kSTGZcTWvJByCUBNWQtDnLosuSszw4j3lF4iEeqDbrUOLMHO4lbF:HMZcTQbyCUbj1osuStq3lF4iDqDPxLsd
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3660	tmp.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4548	078478fee8031a70d002140b660497fe_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4548 wrote to memory of 3660	4548	078478fee8031a70d002140b660497fe_JaffaCakes118.exe	83
PID 4548 wrote to memory of 3660	4548	078478fee8031a70d002140b660497fe_JaffaCakes118.exe	83
PID 4548 wrote to memory of 3660	4548	078478fee8031a70d002140b660497fe_JaffaCakes118.exe	83

C:\Users\Admin\AppData\Local\Temp\078478fee8031a70d002140b660497fe_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\078478fee8031a70d002140b660497fe_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4548
- C:\Users\Admin\AppData\Local\Temp\tmp.exe
  C:\Users\Admin\AppData\Local\Temp\tmp.exe
  2⤵
  - Executes dropped EXE
  PID:3660

tmp.exe

Path C:\Users\Admin\AppData\Local\Temp\tmp.exe
Size 1.2MB
SHA256 8f39ec332a227dfe7d9df2720e382d0f7de528d20494414b368e09c3023b6ef4
MD5 e55e4ba50aa5ca61cb841b4eed72893b
SHA1 7cd8f7bc5c224b5c922b81f57805180ef4add82e
SHA512 4ab1a923a10fc2d4ee379dc9a70d8fba009a147c4130e54d1a5546cfe340130dd4fe6270eb69afe53a8bef639a1414fc46481c63a5e2ce628c35df8d0a48ff7f
SSDEEP 24576:Fgo3c8ExS2sI2jxFnlAvxreFnvDxjHyW8lk8nlsuL:Fj3VgSPIwxNmgFnQpli8
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/3660-7-0x00000000006F0000-0x00000000006F1000-memory.dmp

Download

memory/3660-8-0x00000000023E0000-0x00000000024C1000-memory.dmp

Download

memory/3660-9-0x0000000000400000-0x0000000000537000-memory.dmp

Download

memory/4548-0-0x0000000000400000-0x00000000004058B8-memory.dmp

Download

memory/4548-10-0x0000000000400000-0x00000000004058B8-memory.dmp

Download