8f84190f9aceaad71499db5e90e80ebb56fd3379e9b17e689f60a3b97e6beb82

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28-06-2024 07:03

Target

193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe
Size

107KB
MD5

193745bcf8f1e14f212bcd507540ab40
SHA1

73faeb83b14d516b99f71e6ce7613cc4074f65de
SHA256

8f84190f9aceaad71499db5e90e80ebb56fd3379e9b17e689f60a3b97e6beb82
SHA512

48ae68d37fd767e6504eb6b89fd0c0c7cd98497332509d439c28121330f4648c1d7e107eda89cee7c745afd58722f82d841f3ae80d58e428245d89d36f8db529
SSDEEP

3072:uwwwwwhDLu398XtKW5er7ksPkyn0jhc55VeAiuYyORfXCbo/Q:Pu39cKNrn0j2MFyORfXCbQQ

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4620 wrote to memory of 2576	4620	193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe	80
PID 4620 wrote to memory of 2576	4620	193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe	80
PID 4620 wrote to memory of 2576	4620	193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe	80
PID 4620 wrote to memory of 3476	4620	193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe	81
PID 4620 wrote to memory of 3476	4620	193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe	81
PID 4620 wrote to memory of 3476	4620	193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe	81

C:\Users\Admin\AppData\Local\Temp\193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4620
- C:\Users\Admin\AppData\Local\Temp\193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe 687474703A2F2F7777772E70706968656C7065722E636F6D2F6765742F37
  2⤵
  PID:2576
- C:\Users\Admin\AppData\Local\Temp\193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\193745bcf8f1e14f212bcd507540ab40_JaffaCakes118.exe 687474703A2F2F70706968656C7065722E636F6D2F33786C2E706870
  2⤵
  PID:3476