182b6fb6d54275361b651369209baa77dca4dc50f7dde50fa0a3cdc8c53a0a97

Analysis

max time kernel
149s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
27-06-2024 07:34

Target

152aa96b165153f256d36af7e82508a6_JaffaCakes118.exe
Size

165KB
MD5

152aa96b165153f256d36af7e82508a6
SHA1

284fba8307ad6be04518ff060faf466f21d239dd
SHA256

182b6fb6d54275361b651369209baa77dca4dc50f7dde50fa0a3cdc8c53a0a97
SHA512

6852c7a3b2c13e13291f4996e8fd5538005f95cd33cfa85db49a223e1350a41c67e580d12b7542e194ad21da8eb495060808d8a0197628b20ae24cdb4aeb43da
SSDEEP

3072:5laVmRPC5WJAX24ySKQNMKuEgnMKWLbsG/+oig7PfK4HN:fawpC5WPSKQNM8ZKWLoGGoic

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2748	152aa96b165153f256d36af7e82508a6_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2748 wrote to memory of 2752	2748	152aa96b165153f256d36af7e82508a6_JaffaCakes118.exe	28
PID 2748 wrote to memory of 2752	2748	152aa96b165153f256d36af7e82508a6_JaffaCakes118.exe	28
PID 2748 wrote to memory of 2752	2748	152aa96b165153f256d36af7e82508a6_JaffaCakes118.exe	28
PID 2748 wrote to memory of 2752	2748	152aa96b165153f256d36af7e82508a6_JaffaCakes118.exe	28
PID 2748 wrote to memory of 2752	2748	152aa96b165153f256d36af7e82508a6_JaffaCakes118.exe	28
PID 2748 wrote to memory of 2752	2748	152aa96b165153f256d36af7e82508a6_JaffaCakes118.exe	28
PID 2748 wrote to memory of 2752	2748	152aa96b165153f256d36af7e82508a6_JaffaCakes118.exe	28

memory/2748-1-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2748-0-0x0000000000460000-0x0000000000462000-memory.dmp

Filesize
8KB

Download
memory/2748-8-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2752-2-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2752-3-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2752-4-0x00000000003B2000-0x00000000003B3000-memory.dmp

Filesize
4KB

Download
memory/2752-5-0x00000000003B0000-0x00000000003B8000-memory.dmp

Filesize
32KB

Download