270d77eb9323116c897b7bfc696cb38a7c36ed8cdfa3f8d85d54bc88b17d554b

Analysis

max time kernel
130s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
04/07/2024, 10:11

Target

258f6207e664496f47b43fdf4143e330_JaffaCakes118.dll
Size

307KB
MD5

258f6207e664496f47b43fdf4143e330
SHA1

137e3c5c134c99ee8e3d3fc419e9d35a44f75f37
SHA256

270d77eb9323116c897b7bfc696cb38a7c36ed8cdfa3f8d85d54bc88b17d554b
SHA512

1cb04761a880755216af76f17c0362bc826d91bd82ffc0e540d86a9f5a18b071b8e635a47643a99c0a34a1694846799d806e664a9ad129e28e2531076def974e
SSDEEP

6144:BNLn4C5BZpFw2HHEjxqzR8IVm336knfTJrFXr0/EkMgO/mkCRU:PzlFFEYLVmHF1Z0/Cmw

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3400	rundll32.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2892 wrote to memory of 3400	2892	rundll32.exe	90
PID 2892 wrote to memory of 3400	2892	rundll32.exe	90
PID 2892 wrote to memory of 3400	2892	rundll32.exe	90

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\258f6207e664496f47b43fdf4143e330_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2892
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\258f6207e664496f47b43fdf4143e330_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:3400

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4104,i,1400471177590024469,587385956640537806,262144 --variations-seed-version --mojo-platform-channel-handle=4072 /prefetch:8
1⤵
PID:1568

memory/3400-0-0x0000000010000000-0x000000001009F000-memory.dmp

Filesize
636KB

Download
memory/3400-1-0x0000000010000000-0x000000001009F000-memory.dmp

Filesize
636KB

Download