8fb8af156a2c145653ea0277426ae4e45f7a5a52b010c734977f5504f4ff7e36

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
24/06/2024, 18:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0a28596bade35c1130ce0207b715b36e_JaffaCakes118.exe
Size

46KB
MD5

0a28596bade35c1130ce0207b715b36e
SHA1

138f5d944a76dfb334f19f245569ce3334328b12
SHA256

8fb8af156a2c145653ea0277426ae4e45f7a5a52b010c734977f5504f4ff7e36
SHA512

285d94c155f0e625637692660d6daa9d544dad1d31276306dd85412e094650635e3e6c70d38cebac87fc4121216536444c3ec4b57785d36092a9a6ab252c0824
SSDEEP

768:iSiIEAn6DYczQXDuT+pxvPjgAiXKZC2p2ng4nGwcst:iS4D9zQXcCv/A2p2nNWst

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1976 wrote to memory of 19144	1976	0a28596bade35c1130ce0207b715b36e_JaffaCakes118.exe	28
PID 1976 wrote to memory of 19144	1976	0a28596bade35c1130ce0207b715b36e_JaffaCakes118.exe	28
PID 1976 wrote to memory of 19144	1976	0a28596bade35c1130ce0207b715b36e_JaffaCakes118.exe	28
PID 1976 wrote to memory of 19144	1976	0a28596bade35c1130ce0207b715b36e_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\0a28596bade35c1130ce0207b715b36e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0a28596bade35c1130ce0207b715b36e_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1976
- C:\Users\Admin\AppData\Local\Temp\0a28596bade35c1130ce0207b715b36e_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\0a28596bade35c1130ce0207b715b36e_JaffaCakes118.exe"
  2⤵
  PID:19144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1976-0-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-2-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-4-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-6-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-14-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-16-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-18-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-20-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-22-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-24-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-26-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-28-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-30-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-32-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-34-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-36-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-38-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-40-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-44-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-63-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-60-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-59-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-56-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-54-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-52-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-50-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-48-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1976-46-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads