783af99314ac45a3bade0e1ceda73e4d1d9176b6f44d53767ebeb2d45b4c1365

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 03:19

Target

1898a628d5a66799afcb4ff51be55a22_JaffaCakes118.exe
Size

63KB
MD5

1898a628d5a66799afcb4ff51be55a22
SHA1

cf7535bb5bd013f585d233ddec6e6dfa40558e98
SHA256

783af99314ac45a3bade0e1ceda73e4d1d9176b6f44d53767ebeb2d45b4c1365
SHA512

ac0cf88e4e8f39e830bf7eb683c71ed95b79de78c7d9789c5a7f8e37b17bbf96fe8cce0476234b9b8080e52cd3bbecb31357bec4eba79131995fff91f25bb1f7
SSDEEP

1536:WGPrLmKW0jh9qvKqLrYUFrjjWo7+mYnk81:WeLmKZIvPYUFr3gku

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2944	1898a628d5a66799afcb4ff51be55a22_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2944 wrote to memory of 1308	2944	1898a628d5a66799afcb4ff51be55a22_JaffaCakes118.exe	21
PID 2944 wrote to memory of 1308	2944	1898a628d5a66799afcb4ff51be55a22_JaffaCakes118.exe	21
PID 2944 wrote to memory of 1308	2944	1898a628d5a66799afcb4ff51be55a22_JaffaCakes118.exe	21
PID 2944 wrote to memory of 1308	2944	1898a628d5a66799afcb4ff51be55a22_JaffaCakes118.exe	21
PID 2944 wrote to memory of 1308	2944	1898a628d5a66799afcb4ff51be55a22_JaffaCakes118.exe	21
PID 2944 wrote to memory of 1308	2944	1898a628d5a66799afcb4ff51be55a22_JaffaCakes118.exe	21

memory/1308-3-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1308-10-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2944-0-0x0000000000400000-0x000000000040AE30-memory.dmp

Filesize
43KB

Download
memory/2944-2-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/2944-21-0x0000000000400000-0x000000000040AE30-memory.dmp

Filesize
43KB

Download
memory/2944-22-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download