109eca43a86f852efbc2a00da1c183894065d5fa3af406508fccd55ed649c3a2

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
26-06-2024 00:26

Target

10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe
Size

91KB
MD5

10156199da546bd9cc56c89cbce1dd3c
SHA1

1edfa16cbb244792108fb7d93e6eb4690e886413
SHA256

109eca43a86f852efbc2a00da1c183894065d5fa3af406508fccd55ed649c3a2
SHA512

6c26613362e89d4703ce5fb87720303bc5d4509519e92df825b02f07d85aec8887339c33ff1fa08d891dd2bfbf61fed2137a6b0e727a7fa1cfcd72aa4a5a5230
SSDEEP

1536:vpuoqDCuqZep9g37PP92TfMw5PDSYJQJzN6orX1DeQRodhq36oGwFMJVATE8aFSC:v1qD3NgLtgP5r7QJzYob16dUL4JqTE88

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1140 set thread context of 3980	1140	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	82

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3980	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe
3980	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe
3980	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe
3980	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 1140 wrote to memory of 3980	1140	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	82
PID 1140 wrote to memory of 3980	1140	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	82
PID 1140 wrote to memory of 3980	1140	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	82
PID 1140 wrote to memory of 3980	1140	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	82
PID 1140 wrote to memory of 3980	1140	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	82
PID 3980 wrote to memory of 3448	3980	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	56
PID 3980 wrote to memory of 3448	3980	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	56
PID 3980 wrote to memory of 3448	3980	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	56
PID 3980 wrote to memory of 3448	3980	10156199da546bd9cc56c89cbce1dd3c_JaffaCakes118.exe	56

memory/3448-4-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3448-5-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/3980-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3980-1-0x0000000000400000-0x000000000040D000-memory.dmp

Filesize
52KB

Download
memory/3980-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3980-9-0x0000000000400000-0x000000000040D000-memory.dmp

Filesize
52KB

Download