603f4fbaad0315e9fd3d2f2ec442cc58913a5c1875a5a3f1f9e981b1f8ecfdf3

Analysis

max time kernel
51s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27-06-2024 17:08

Target

16ce9cf6ab0f056463105869ccce0b92_JaffaCakes118.exe
Size

212KB
MD5

16ce9cf6ab0f056463105869ccce0b92
SHA1

6fd6f9052f28e7b2c26e5b84a3550ee347c414d0
SHA256

603f4fbaad0315e9fd3d2f2ec442cc58913a5c1875a5a3f1f9e981b1f8ecfdf3
SHA512

0e5db87623c9c442ea575cf0434d4f4ad66584853439f05cf2bb17ef849c88450a10554bad96a6884de815c8270150344a335c9b864728df5ce4279bb6c49cd9
SSDEEP

3072:oSRLHCLsqpQtGxYk5jYUMrGPPMAGw2Xu3utwnKjx17kqrbaUCs3eXL35aF9a9LqH:odLsiYUBMAGw2Xu3mgRLyPFA5qs72Q4

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1360 wrote to memory of 4720	1360	16ce9cf6ab0f056463105869ccce0b92_JaffaCakes118.exe	81
PID 1360 wrote to memory of 4720	1360	16ce9cf6ab0f056463105869ccce0b92_JaffaCakes118.exe	81

C:\Users\Admin\AppData\Local\Temp\16ce9cf6ab0f056463105869ccce0b92_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\16ce9cf6ab0f056463105869ccce0b92_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1360
- C:\Users\Admin\AppData\Local\Temp\16ce9cf6ab0f056463105869ccce0b92_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\16ce9cf6ab0f056463105869ccce0b92_JaffaCakes118.exe
  2⤵
  PID:4720

memory/1360-0-0x00007FF9F6985000-0x00007FF9F6986000-memory.dmp

Filesize
4KB

Download
memory/1360-1-0x000000001BB00000-0x000000001BBA6000-memory.dmp

Filesize
664KB

Download
memory/1360-2-0x00007FF9F66D0000-0x00007FF9F7071000-memory.dmp

Filesize
9.6MB

Download
memory/1360-3-0x000000001C1D0000-0x000000001C69E000-memory.dmp

Filesize
4.8MB

Download
memory/1360-4-0x000000001C740000-0x000000001C7DC000-memory.dmp

Filesize
624KB

Download
memory/1360-6-0x000000001BBB0000-0x000000001BBB8000-memory.dmp

Filesize
32KB

Download
memory/1360-5-0x00007FF9F66D0000-0x00007FF9F7071000-memory.dmp

Filesize
9.6MB

Download
memory/1360-7-0x000000001C830000-0x000000001C87C000-memory.dmp

Filesize
304KB

Download
memory/1360-9-0x00007FF9F66D0000-0x00007FF9F7071000-memory.dmp

Filesize
9.6MB

Download