4e78b3dfe37896926047e751a2be0b0490848a8f9cb8ea65bfec1001a9172fbe

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 03:04

Target

188f240f70c680c6617a256b623d0c29_JaffaCakes118.exe
Size

28KB
MD5

188f240f70c680c6617a256b623d0c29
SHA1

ba49053dc40ef42502b39a47585ddc9f33faab67
SHA256

4e78b3dfe37896926047e751a2be0b0490848a8f9cb8ea65bfec1001a9172fbe
SHA512

544d50e54b86d198fe143429ae49420dfb758e6ffd14f7c26170221f57c09654719b0aeab87c0b93a0d3f29d8989b630a059ab24d9118e65f2a368f26097ffac
SSDEEP

384:UmOyMLjKMPH1Dxw7ZA8l9ZoA7k+w9G5hmssR0IkR46nzojn8mgRRtssIeo/r5J1T:hUjKVjl9xw3x6nz7vj1wrJ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2268	188f240f70c680c6617a256b623d0c29_JaffaCakes118.exe
2268	188f240f70c680c6617a256b623d0c29_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2268 wrote to memory of 1204	2268	188f240f70c680c6617a256b623d0c29_JaffaCakes118.exe	21
PID 2268 wrote to memory of 1204	2268	188f240f70c680c6617a256b623d0c29_JaffaCakes118.exe	21
PID 2268 wrote to memory of 1204	2268	188f240f70c680c6617a256b623d0c29_JaffaCakes118.exe	21
PID 2268 wrote to memory of 1204	2268	188f240f70c680c6617a256b623d0c29_JaffaCakes118.exe	21
PID 2268 wrote to memory of 1204	2268	188f240f70c680c6617a256b623d0c29_JaffaCakes118.exe	21
PID 2268 wrote to memory of 1204	2268	188f240f70c680c6617a256b623d0c29_JaffaCakes118.exe	21

memory/1204-2-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1204-8-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2268-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2268-1-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2268-20-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2268-22-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download