a6a241eb7e7cd8c42b95b0240105c33756502a58a13a3517007a75dfc07b1c9f

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
24-06-2024 18:21

Target

0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe
Size

50KB
MD5

0a18ebd489ca1b546593bd86d8f7e4e9
SHA1

a0ebc82e352f267033dede05221f2a3c33d1dc5d
SHA256

a6a241eb7e7cd8c42b95b0240105c33756502a58a13a3517007a75dfc07b1c9f
SHA512

083a290587d6a1540b838cd29977cbc41602de2a0a4f8310e7cb2103eedab3eb27ccda8b2479b4f28cf8559565c698be08522b848def5848301ccdc121af5d3f
SSDEEP

768:cUjKVjl9xw3x6nz7vj1wrMj2b3lpY7muoR4P7WZhqjNpQMqC1wC:cUKJ3zzj1wQj2b3lpce+6jqj9qRC

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2848	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe
2848	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2848 wrote to memory of 1104	2848	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	20
PID 2848 wrote to memory of 1104	2848	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	20
PID 2848 wrote to memory of 1104	2848	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	20
PID 2848 wrote to memory of 1104	2848	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	20
PID 2848 wrote to memory of 1104	2848	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	20
PID 2848 wrote to memory of 1104	2848	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	20

memory/1104-3-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1104-9-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2848-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2848-1-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2848-21-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download