9b1adeb3426adffb30e74cc877c20d29fba2e35515943bec62dafecf2b955736

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
01/07/2024, 07:48

Target

1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118.exe
Size

2.9MB
MD5

1a7df6ead561967345bd81bc38aa36f1
SHA1

d1bf6ae452f5bd9bf04160d18f93506bd3fa4c7c
SHA256

9b1adeb3426adffb30e74cc877c20d29fba2e35515943bec62dafecf2b955736
SHA512

b4cb884de6c47577f84997eb9c21a64ac93b30c1534c88bdd71d2c1b36742322c4d6e7209b2ea8b867466dc024a79d54a362c9140d5b49dcf64f67bc56a677ab
SSDEEP

49152:blkJR0kxNrpU408hG2oKzbqO0Bz99UxEX8V72aExG4bNsWkn50a86tFX80oIKMxh:BkDtVF083mp59UxEsoxZqn50a86tFXQ4

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2192	TMP0021.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1676	1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1676 wrote to memory of 2192	1676	1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118.exe	83
PID 1676 wrote to memory of 2192	1676	1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118.exe	83
PID 1676 wrote to memory of 2192	1676	1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118.exe	83

C:\Users\Admin\AppData\Local\Temp\1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1676
- C:\Users\Admin\AppData\Local\TMP0021.exe
  C:\Users\Admin\AppData\Local\TMP0021.exe pth:C:\Users\Admin\AppData\Local\Temp\1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118.exe
  2⤵
  - Executes dropped EXE
  PID:2192

C:\Users\Admin\AppData\Local\TMP0021.exe

Filesize
2.9MB

MD5
5e7d69669e385f1083001aa573511b57

SHA1
6584f7a3aea6c429640d70979d6dd2850c98f09b

SHA256
26ce408a803c94a29f5621e2af577a72c6bd316747e89970b15234a22c579911

SHA512
cefd04b5a0e052870596f7c07d1508fb1d0a94761d08a5983e4e9d32bcebc6d7fa6b5b94d4f21f7542c5a23a22aed47433722c3ed322c09bc46c9344392c57f7

Download Submit