2a62ccb2e0248f9c0c915d9b7445ce2fa336e8199535cee1aff3c34383e5519a

Analysis

max time kernel
149s
max time network
126s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
25-06-2024 12:19

Target

0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118.exe
Size

84KB
MD5

0e0b1878ba5de0e538c27f09389d1b85
SHA1

294d86e2c56021716bb367cc23fcf1ee5c478386
SHA256

2a62ccb2e0248f9c0c915d9b7445ce2fa336e8199535cee1aff3c34383e5519a
SHA512

027cee1bdb60e24df16e20fb6290c3dabb8f895e690861ee0f423fd33c98e6f8ac7b5f41301f9db3b8ca52caec0b1ae29dc44c991c249b4ef6fba5e95f4fa4ee
SSDEEP

1536:OurAjD8eOvSZcIy8Se1gjsSdqlqeZMKnCz/WXajO3mVZPoFgdytKDi49:OurAjQp6ZccSe1As6IqefnyWKjWsZuo3

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2256	0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2256 wrote to memory of 2252	2256	0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118.exe	28
PID 2256 wrote to memory of 2252	2256	0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118.exe	28
PID 2256 wrote to memory of 2252	2256	0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118.exe	28
PID 2256 wrote to memory of 2252	2256	0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118.exe	28
PID 2256 wrote to memory of 2252	2256	0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118.exe	28
PID 2256 wrote to memory of 2252	2256	0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118.exe	28
PID 2256 wrote to memory of 2252	2256	0e0b1878ba5de0e538c27f09389d1b85_JaffaCakes118.exe	28

memory/2252-5-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2252-6-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2252-9-0x0000000000712000-0x0000000000713000-memory.dmp

Filesize
4KB

Download
memory/2252-10-0x0000000000710000-0x0000000000718000-memory.dmp

Filesize
32KB

Download
memory/2256-0-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/2256-4-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2256-3-0x00000000003D0000-0x00000000003E2000-memory.dmp

Filesize
72KB

Download
memory/2256-8-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download