a6a241eb7e7cd8c42b95b0240105c33756502a58a13a3517007a75dfc07b1c9f

Analysis

max time kernel
142s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
24-06-2024 18:21

Target

0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe
Size

50KB
MD5

0a18ebd489ca1b546593bd86d8f7e4e9
SHA1

a0ebc82e352f267033dede05221f2a3c33d1dc5d
SHA256

a6a241eb7e7cd8c42b95b0240105c33756502a58a13a3517007a75dfc07b1c9f
SHA512

083a290587d6a1540b838cd29977cbc41602de2a0a4f8310e7cb2103eedab3eb27ccda8b2479b4f28cf8559565c698be08522b848def5848301ccdc121af5d3f
SSDEEP

768:cUjKVjl9xw3x6nz7vj1wrMj2b3lpY7muoR4P7WZhqjNpQMqC1wC:cUKJ3zzj1wQj2b3lpce+6jqj9qRC

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3580	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe
3580	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe
3580	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe
3580	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3580 wrote to memory of 3360	3580	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	57
PID 3580 wrote to memory of 3360	3580	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	57
PID 3580 wrote to memory of 3360	3580	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	57
PID 3580 wrote to memory of 3360	3580	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	57
PID 3580 wrote to memory of 3360	3580	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	57
PID 3580 wrote to memory of 3360	3580	0a18ebd489ca1b546593bd86d8f7e4e9_JaffaCakes118.exe	57

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2232 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:8
1⤵
PID:4484

memory/3360-3-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/3360-5-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download
memory/3580-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3580-1-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/3580-9-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3580-10-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download