84d3446479320574ebc180f795e1f46f2eab8016386a26d68cb503226f2aa605

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
28-06-2024 08:22

Target

197071460e15ffb15f1bbd6dc8f89eca_JaffaCakes118.dll
Size

48KB
MD5

197071460e15ffb15f1bbd6dc8f89eca
SHA1

73c0508dd7850d49b403379cff03113a9265c5fa
SHA256

84d3446479320574ebc180f795e1f46f2eab8016386a26d68cb503226f2aa605
SHA512

f8ce8c3bd325872ddf23bdbc7e80b062cb48f8f1d37b963253078ab24a55c5aa37d858fa9668393177e0944a8da9f557800d4b5a2ffc515e0060479f252001ac
SSDEEP

768:kah/srb61Dnyt0jkIfIbnJYeoMnbNlsoiGgqh:ku036pjnfITqMnXilqh

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2948	rundll32.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2948 wrote to memory of 1204	2948	rundll32.exe	21

memory/1204-0-0x0000000002E10000-0x0000000002E11000-memory.dmp

Filesize
4KB

Download