e374a531d4c2cc665ae31a7154202fef0ca5e3295c03a0da592d5bfc36b10e4e

Analysis

max time kernel
93s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
04-07-2024 03:06

Target

246b7456d42bbf207a4b0b152f8ee91c_JaffaCakes118.exe
Size

93KB
MD5

246b7456d42bbf207a4b0b152f8ee91c
SHA1

c91c38ebac6d981a1643f7759bec0c9ad78f19ca
SHA256

e374a531d4c2cc665ae31a7154202fef0ca5e3295c03a0da592d5bfc36b10e4e
SHA512

33a2e1fa08d8dee905e7737288f6e1065acd99d1e4b42fe9af312238e4d53a9a2b58c5f6dc3ce6721417b590e4db9fae034c715121aadc00b1b65cb414ede4eb
SSDEEP

1536:MUqXwQ3XXleMuQwvOdkrnGWDvuGN6aO1/VZtLibsI2GB0tpmaQTpFX5TdgyK9:mwuXV2OOrGWD2GNHO1/VZtLibsz7D+X0

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2028	246b7456d42bbf207a4b0b152f8ee91c_JaffaCakes118~.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4492 wrote to memory of 2028	4492	246b7456d42bbf207a4b0b152f8ee91c_JaffaCakes118.exe	80
PID 4492 wrote to memory of 2028	4492	246b7456d42bbf207a4b0b152f8ee91c_JaffaCakes118.exe	80
PID 4492 wrote to memory of 2028	4492	246b7456d42bbf207a4b0b152f8ee91c_JaffaCakes118.exe	80

C:\Users\Admin\AppData\Local\Temp\246b7456d42bbf207a4b0b152f8ee91c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\246b7456d42bbf207a4b0b152f8ee91c_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4492
- C:\Users\Admin\AppData\Local\Temp\246b7456d42bbf207a4b0b152f8ee91c_JaffaCakes118~.exe
  246b7456d42bbf207a4b0b152f8ee91c_JaffaCakes118~.exe
  2⤵
  - Executes dropped EXE
  PID:2028

C:\Users\Admin\AppData\Local\Temp\246b7456d42bbf207a4b0b152f8ee91c_JaffaCakes118~.exe

Filesize
93KB

MD5
246b7456d42bbf207a4b0b152f8ee91c

SHA1
c91c38ebac6d981a1643f7759bec0c9ad78f19ca

SHA256
e374a531d4c2cc665ae31a7154202fef0ca5e3295c03a0da592d5bfc36b10e4e

SHA512
33a2e1fa08d8dee905e7737288f6e1065acd99d1e4b42fe9af312238e4d53a9a2b58c5f6dc3ce6721417b590e4db9fae034c715121aadc00b1b65cb414ede4eb

Download Submit
memory/2028-4-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/4492-5-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download