13d9781c45f6dc135bfec2a2fee5ce8d2fdeddd51e823b3ca6fa605da2a61dd4

Analysis

max time kernel
93s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27-06-2024 18:02

Target

16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe
Size

64KB
MD5

16f7d8d696b5d72b58f5c72753169ecc
SHA1

ed5aabcfb91b5ec03a1537e81a4c3342fc8bd052
SHA256

13d9781c45f6dc135bfec2a2fee5ce8d2fdeddd51e823b3ca6fa605da2a61dd4
SHA512

35ab640cde928573ae6bc7d71f1bdf331b80208cb134159f2ad9e628a37baf138c7d192772099a5b194f0bd0fa57a0bc2af8e1e000d2b75143c177d5351b66d8
SSDEEP

768:ZQJOLx4+UnVeE/kl2mNQsZUxzvv2jGvAy6q2K6Ze4479+23cOb5J:ZQJOi+UnVDYLynTCGv8hZG7vsOb3

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 536 set thread context of 2520	536	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
536	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 536 wrote to memory of 2520	536	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	80
PID 536 wrote to memory of 2520	536	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	80
PID 536 wrote to memory of 2520	536	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	80
PID 536 wrote to memory of 2520	536	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	80
PID 536 wrote to memory of 2520	536	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	80
PID 536 wrote to memory of 2520	536	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	80
PID 536 wrote to memory of 2520	536	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	80
PID 536 wrote to memory of 2520	536	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	80
PID 536 wrote to memory of 2520	536	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	80
PID 2520 wrote to memory of 4808	2520	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	81
PID 2520 wrote to memory of 4808	2520	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	81
PID 2520 wrote to memory of 4808	2520	16f7d8d696b5d72b58f5c72753169ecc_JaffaCakes118.exe	81

memory/2520-2-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/2520-4-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/2520-5-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/2520-6-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download