13d9781c45f6dc135bfec2a2fee5ce8d2fdeddd51e823b3ca6fa605da2a61dd4

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
27-06-2024 18:02

Target

16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe
Size

64KB
MD5

16f7d8d696b5d72b58f5c72753169ecc
SHA1

ed5aabcfb91b5ec03a1537e81a4c3342fc8bd052
SHA256

13d9781c45f6dc135bfec2a2fee5ce8d2fdeddd51e823b3ca6fa605da2a61dd4
SHA512

35ab640cde928573ae6bc7d71f1bdf331b80208cb134159f2ad9e628a37baf138c7d192772099a5b194f0bd0fa57a0bc2af8e1e000d2b75143c177d5351b66d8
SSDEEP

768:ZQJOLx4+UnVeE/kl2mNQsZUxzvv2jGvAy6q2K6Ze4479+23cOb5J:ZQJOi+UnVDYLynTCGv8hZG7vsOb3

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2356 set thread context of 1036	2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	28

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 1036	2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	28
PID 2356 wrote to memory of 1036	2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	28
PID 2356 wrote to memory of 1036	2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	28
PID 2356 wrote to memory of 1036	2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	28
PID 2356 wrote to memory of 1036	2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	28
PID 2356 wrote to memory of 1036	2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	28
PID 2356 wrote to memory of 1036	2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	28
PID 2356 wrote to memory of 1036	2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	28
PID 2356 wrote to memory of 1036	2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	28
PID 2356 wrote to memory of 1036	2356	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	28
PID 1036 wrote to memory of 1716	1036	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	29
PID 1036 wrote to memory of 1716	1036	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	29
PID 1036 wrote to memory of 1716	1036	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	29
PID 1036 wrote to memory of 1716	1036	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	29

memory/1036-12-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/1036-10-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/1036-16-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/1036-17-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/1036-14-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/1036-8-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/1036-6-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/1036-4-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/1036-2-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/1036-18-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download