109eca43a86f852efbc2a00da1c183894065d5fa3af406508fccd55ed649c3a2

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
26/06/2024, 00:26

Target

10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe
Size

91KB
MD5

10156199da546bd9cc56c89cbce1dd3c
SHA1

1edfa16cbb244792108fb7d93e6eb4690e886413
SHA256

109eca43a86f852efbc2a00da1c183894065d5fa3af406508fccd55ed649c3a2
SHA512

6c26613362e89d4703ce5fb87720303bc5d4509519e92df825b02f07d85aec8887339c33ff1fa08d891dd2bfbf61fed2137a6b0e727a7fa1cfcd72aa4a5a5230
SSDEEP

1536:vpuoqDCuqZep9g37PP92TfMw5PDSYJQJzN6orX1DeQRodhq36oGwFMJVATE8aFSC:v1qD3NgLtgP5r7QJzYob16dUL4JqTE88

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2088 set thread context of 1780	2088	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1780	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe
1780	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 1780	2088	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	28
PID 2088 wrote to memory of 1780	2088	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	28
PID 2088 wrote to memory of 1780	2088	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	28
PID 2088 wrote to memory of 1780	2088	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	28
PID 2088 wrote to memory of 1780	2088	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	28
PID 2088 wrote to memory of 1780	2088	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	28
PID 1780 wrote to memory of 1180	1780	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	21
PID 1780 wrote to memory of 1180	1780	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	21
PID 1780 wrote to memory of 1180	1780	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	21
PID 1780 wrote to memory of 1180	1780	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	21

memory/1180-5-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1180-8-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/1780-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/1780-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1780-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download