9fbca497857e0de05c811444ae0e88fd779f6fab604338ebf4a21d72367e8e08

Analysis

max time kernel
120s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
24/06/2024, 18:49

Target

0a3b88dc9071e81a46f9fef269c30617_JaffaCakes118.exe
Size

431KB
MD5

0a3b88dc9071e81a46f9fef269c30617
SHA1

a0a22e78a1a888b18df17af189ff4c62fab37e89
SHA256

9fbca497857e0de05c811444ae0e88fd779f6fab604338ebf4a21d72367e8e08
SHA512

d0fa9183fb2059715770d95f9dea5ac136aef908afcd2d0201c652d4cbf31a7a830b8d06b328ba6b2dfab0cfa7a8be92766afc8c5677d76b17a10e83f604a2cc
SSDEEP

12288:odoiYU1ye3mbKHzhTCk7rg6T7m0KSMZGFRanHCV7sai4Y:oqTe3mGHzhTpsm7tBMyRdV7sdP

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 2184	2216	0a3b88dc9071e81a46f9fef269c30617_JaffaCakes118.exe	82
PID 2216 wrote to memory of 2184	2216	0a3b88dc9071e81a46f9fef269c30617_JaffaCakes118.exe	82

C:\Users\Admin\AppData\Local\Temp\0a3b88dc9071e81a46f9fef269c30617_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0a3b88dc9071e81a46f9fef269c30617_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2216
- C:\Users\Admin\AppData\Local\Temp\0a3b88dc9071e81a46f9fef269c30617_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\0a3b88dc9071e81a46f9fef269c30617_JaffaCakes118.exe
  2⤵
  PID:2184

memory/2216-0-0x00007FF841935000-0x00007FF841936000-memory.dmp

Filesize
4KB

Download
memory/2216-1-0x000000001B920000-0x000000001B9C6000-memory.dmp

Filesize
664KB

Download
memory/2216-3-0x000000001BF10000-0x000000001C3DE000-memory.dmp

Filesize
4.8MB

Download
memory/2216-2-0x00007FF841680000-0x00007FF842021000-memory.dmp

Filesize
9.6MB

Download
memory/2216-4-0x000000001C520000-0x000000001C5BC000-memory.dmp

Filesize
624KB

Download
memory/2216-6-0x000000001BA00000-0x000000001BA08000-memory.dmp

Filesize
32KB

Download
memory/2216-5-0x00007FF841680000-0x00007FF842021000-memory.dmp

Filesize
9.6MB

Download
memory/2216-7-0x000000001C680000-0x000000001C6CC000-memory.dmp

Filesize
304KB

Download
memory/2216-9-0x00007FF841680000-0x00007FF842021000-memory.dmp

Filesize
9.6MB

Download