a0535b1ced3fc56b220a3d975b9774b1619cbd0d765c58969b1b1e5f2fef20b4

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
25/06/2024, 09:45

Target

0d993fcdfa3dde65e7f3b450a752490f_JaffaCakes118.exe
Size

251KB
MD5

0d993fcdfa3dde65e7f3b450a752490f
SHA1

bdd783adf04e0594f3d086d690b8a1f340e6586b
SHA256

a0535b1ced3fc56b220a3d975b9774b1619cbd0d765c58969b1b1e5f2fef20b4
SHA512

bdc935d575f671e65ab3f68ae91472ba0118bdf0e70b6d5f8cadab445ee245850dbe63ffe2d2eda5f32f0460ae530a336fad8190426694566b116c2e625651e2
SSDEEP

3072:wvjAYZeu9Xb8YPRSqmp6sksmTkFfSfOUnTAS9Nm0er/ROYNjkanOLr1+Rs4y1+qH:gEYZeurpSqnTkQj/heFOYN+gRs7M3hu

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1200	0d993fcdfa3dde65e7f3b450a752490f_JaffaCakes118.exe
1200	0d993fcdfa3dde65e7f3b450a752490f_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1200 wrote to memory of 1268	1200	0d993fcdfa3dde65e7f3b450a752490f_JaffaCakes118.exe	21
PID 1200 wrote to memory of 1268	1200	0d993fcdfa3dde65e7f3b450a752490f_JaffaCakes118.exe	21
PID 1200 wrote to memory of 1268	1200	0d993fcdfa3dde65e7f3b450a752490f_JaffaCakes118.exe	21
PID 1200 wrote to memory of 1268	1200	0d993fcdfa3dde65e7f3b450a752490f_JaffaCakes118.exe	21

memory/1200-2-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/1200-6-0x00000000756D1000-0x00000000756D2000-memory.dmp

Filesize
4KB

Download
memory/1200-7-0x00000000756C0000-0x00000000757D0000-memory.dmp

Filesize
1.1MB

Download
memory/1200-5-0x00000000775F0000-0x00000000775F1000-memory.dmp

Filesize
4KB

Download
memory/1200-4-0x0000000001EA0000-0x0000000001EB0000-memory.dmp

Filesize
64KB

Download
memory/1200-3-0x00000000004B0000-0x00000000004C0000-memory.dmp

Filesize
64KB

Download
memory/1200-1-0x0000000000260000-0x00000000002AE000-memory.dmp

Filesize
312KB

Download
memory/1200-0-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/1200-21-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/1200-22-0x0000000000260000-0x00000000002AE000-memory.dmp

Filesize
312KB

Download
memory/1200-23-0x00000000756C0000-0x00000000757D0000-memory.dmp

Filesize
1.1MB

Download
memory/1268-9-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1268-12-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download