94cc5d5bf365d34866d4f554e3f44998690f1dfae9697d51389342d45efe1233

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
25/06/2024, 11:01

Target

0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe
Size

288KB
MD5

0dd1ab7537055e5b9680f29d242eed2f
SHA1

ee4dfe0d639e8f73e6c23c41c0f61affbaac411e
SHA256

94cc5d5bf365d34866d4f554e3f44998690f1dfae9697d51389342d45efe1233
SHA512

71faff12389756aa9e7cb7362cd9b9fd41054694cbbe60f7ca79da77b9077d1f24454f91b2f2c245d56ef781a1e8b669a1da2b67590cff5916bb11c07d95aab2
SSDEEP

3072:FQKloQSrkKgRENEI5apGTwQqVMTW0hiJDTL1D3HeqC53wxFrMC6sYppoBptJMr5V:FVDXet53wzrM3sYpc/uvd

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2160 set thread context of 2204	2160	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2204	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe
2204	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2160	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2160 wrote to memory of 2204	2160	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	28
PID 2160 wrote to memory of 2204	2160	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	28
PID 2160 wrote to memory of 2204	2160	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	28
PID 2160 wrote to memory of 2204	2160	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	28
PID 2160 wrote to memory of 2204	2160	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	28
PID 2160 wrote to memory of 2204	2160	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	28
PID 2160 wrote to memory of 2204	2160	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	28
PID 2160 wrote to memory of 2204	2160	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	28
PID 2204 wrote to memory of 1344	2204	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	21
PID 2204 wrote to memory of 1344	2204	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	21
PID 2204 wrote to memory of 1344	2204	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	21
PID 2204 wrote to memory of 1344	2204	0dd1ab7537055e5b9680f29d242eed2f_JaffaCakes118.exe	21

memory/1344-7-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1344-10-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2204-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2204-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2204-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2204-5-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download