dbca4d3d404184ae2542906ae65e90cd6cd595d8cec31e4f223afeaf2f72e1be

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27/06/2024, 08:24

Target

155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe
Size

53KB
MD5

155051f27d19fe9024ddb11d0edf6d1d
SHA1

2417a6d0b7d38189aa8381737b2f9156781e083b
SHA256

dbca4d3d404184ae2542906ae65e90cd6cd595d8cec31e4f223afeaf2f72e1be
SHA512

51d6a69abfbe05fb0cd40855a55acfda1a2bd47b79318dbb9d4b60b57f0febd03a4acc775d5272f8ffcd4e27ce8c422d9b7c6ece11a3cda558695db1cc450c85
SSDEEP

768:KxqnVegLd85xib3GgKYA/r1yW5PMzrSpWBDZd4jiKtoWyt2YFYWj3U0Yf/Nfrgm+:KW85Yb3k5OXXBd6i6o7EYFYUpc0R

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2576 set thread context of 2280	2576	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	81

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2280	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe
2280	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe
2280	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe
2280	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2576	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2576 wrote to memory of 2280	2576	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	81
PID 2576 wrote to memory of 2280	2576	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	81
PID 2576 wrote to memory of 2280	2576	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	81
PID 2576 wrote to memory of 2280	2576	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	81
PID 2576 wrote to memory of 2280	2576	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	81
PID 2576 wrote to memory of 2280	2576	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	81
PID 2576 wrote to memory of 2280	2576	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	81
PID 2280 wrote to memory of 3428	2280	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	56
PID 2280 wrote to memory of 3428	2280	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	56
PID 2280 wrote to memory of 3428	2280	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	56
PID 2280 wrote to memory of 3428	2280	155051f27d19fe9024ddb11d0edf6d1d_JaffaCakes118.exe	56

memory/2280-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2280-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2280-6-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/2280-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2280-14-0x0000000000410000-0x00000000004D9000-memory.dmp

Filesize
804KB

Download
memory/2576-0-0x0000000000400000-0x000000000041B71E-memory.dmp

Filesize
109KB

Download
memory/2576-9-0x0000000000400000-0x000000000041B71E-memory.dmp

Filesize
109KB

Download
memory/3428-10-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3428-11-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download