0c3fef16327d3141befff8854c59cb2b1dc21c230c3ee8aa0e39355d883db963

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01/07/2024, 21:25

Target

1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe
Size

70KB
MD5

1c8d30e163f6f6722366ed2d295fb1bf
SHA1

c553274897034205cac97d2f9f98e80b29caafae
SHA256

0c3fef16327d3141befff8854c59cb2b1dc21c230c3ee8aa0e39355d883db963
SHA512

f7f3ee15eb78f060f33aed826e4822d2e56bf85c1a8cf5a4015d1576c3c76e3a7461af374aed194389339b94a3f3ee7f18c20b9f27cdac6d5d0ce7b4c6b31c97
SSDEEP

768:vEEYCl0ax2rCDhEhlFm3bIic7VjJerWgz/htJH2oIaTZhJnwTMrpfItAVX6oIyDi:Dx0OOh+bKVj4Cgz/DJHdTNRpJ66tSlB1

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2180 set thread context of 2152	2180	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe	29

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2152	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe
2152	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 2152	2180	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe	29
PID 2180 wrote to memory of 2152	2180	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe	29
PID 2180 wrote to memory of 2152	2180	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe	29
PID 2180 wrote to memory of 2152	2180	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe	29
PID 2180 wrote to memory of 2152	2180	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe	29
PID 2180 wrote to memory of 2152	2180	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe	29
PID 2152 wrote to memory of 1232	2152	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe	21
PID 2152 wrote to memory of 1232	2152	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe	21
PID 2152 wrote to memory of 1232	2152	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe	21
PID 2152 wrote to memory of 1232	2152	1c8d30e163f6f6722366ed2d295fb1bf_JaffaCakes118.exe	21

memory/1232-6-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1232-9-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2152-1-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2152-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2152-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2180-0-0x0000000000400000-0x0000000000411800-memory.dmp

Filesize
70KB

Download
memory/2180-3-0x0000000000400000-0x0000000000411800-memory.dmp

Filesize
70KB

Download