02d13e873a8899004afd808aa2b52554283f989377013492b1f65a6000d254ce

Analysis

max time kernel
10s
max time network
16s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
04/07/2024, 22:21

Target

267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe
Size

61KB
MD5

267027a1d11eb5ab92ba6ccfd405324d
SHA1

6cddeda5c52c08c89bf7cc70ac0068837d89b613
SHA256

02d13e873a8899004afd808aa2b52554283f989377013492b1f65a6000d254ce
SHA512

9aea75de595db25ca035745f00db85798b190820d29fd92f800311267fbe6afbec2aac642568bc72c60ebbd3ce9b86c5354b433d16be9007d721207c1f5af621
SSDEEP

1536:/jQXap6RcExuEb16y/Qyrt+X0ZCywuK1lRZaYL:UX9VbR/fta0ZCVuKFx

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2548 set thread context of 2504	2548	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe	29

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2504	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe
2504	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2548 wrote to memory of 2504	2548	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe	29
PID 2548 wrote to memory of 2504	2548	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe	29
PID 2548 wrote to memory of 2504	2548	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe	29
PID 2548 wrote to memory of 2504	2548	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe	29
PID 2548 wrote to memory of 2504	2548	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe	29
PID 2548 wrote to memory of 2504	2548	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe	29
PID 2504 wrote to memory of 1200	2504	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe	20
PID 2504 wrote to memory of 1200	2504	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe	20
PID 2504 wrote to memory of 1200	2504	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe	20
PID 2504 wrote to memory of 1200	2504	267027a1d11eb5ab92ba6ccfd405324d_JaffaCakes118.exe	20

memory/1200-4-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1200-7-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2504-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2504-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2504-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download