01191c4ee1871d9fada0d7238835a0b4c532f44831b2b38c39ef7161a85983c8

Analysis

max time kernel
133s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
27/06/2024, 21:54

Target

17aa7d57035e9e70fcbc5d58c594719f_JaffaCakes118.exe
Size

165KB
MD5

17aa7d57035e9e70fcbc5d58c594719f
SHA1

dc308ac0041699dfc47dd4f2114fe77276b02c66
SHA256

01191c4ee1871d9fada0d7238835a0b4c532f44831b2b38c39ef7161a85983c8
SHA512

ef5520e33a195c28c82e652d903948aea3c4cf4a72ab6c64a9129dab10a67f004ee725eae1e54a04936301e8d30330c88fd13d86a2b317a49d43b1470a64953d
SSDEEP

3072:5sBOeFnEQ/2bFq2AMU60AjDV65KDx0T9heZE4ED83a7:S47NlXDViRTrw7+

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
4800	17aa7d57035e9e70fcbc5d58c594719f_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 4800 wrote to memory of 1848	4800	17aa7d57035e9e70fcbc5d58c594719f_JaffaCakes118.exe	83
PID 4800 wrote to memory of 1848	4800	17aa7d57035e9e70fcbc5d58c594719f_JaffaCakes118.exe	83
PID 4800 wrote to memory of 1848	4800	17aa7d57035e9e70fcbc5d58c594719f_JaffaCakes118.exe	83
PID 4800 wrote to memory of 1848	4800	17aa7d57035e9e70fcbc5d58c594719f_JaffaCakes118.exe	83
PID 4800 wrote to memory of 1848	4800	17aa7d57035e9e70fcbc5d58c594719f_JaffaCakes118.exe	83

memory/4800-0-0x00000000006F0000-0x00000000006F1000-memory.dmp

Filesize
4KB

Download
memory/4800-1-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/4800-3-0x0000000000420000-0x000000000042E000-memory.dmp

Filesize
56KB

Download