eed2a9f8ead6364a3c6d949de3085fa73e5fa59ad6c5637e4d99b5b05a127e66

Analysis

max time kernel
147s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
04/07/2024, 18:45

Target

25d95677e1953574d97f1592c4283824_JaffaCakes118.exe
Size

50KB
MD5

25d95677e1953574d97f1592c4283824
SHA1

ec00078bab69221384d7ccd4105865a7c5b539fb
SHA256

eed2a9f8ead6364a3c6d949de3085fa73e5fa59ad6c5637e4d99b5b05a127e66
SHA512

cf0c04c137e2fe8878f0cc31dc776ad1fb1f524f5f86eb6a2737edca13a58bc5cb6743042a9a524ed50a4e4ee4977ec96f22c3392b113983d9eeceb20f47b75f
SSDEEP

768:hUjKVjl9xw3x6nz7vj1wrPNEaRO4JfUo12yJmXayHci7PuPUVHF:hUKJ3zzj1wREaRO4DJJEljuPUD

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1076 wrote to memory of 3496	1076	25d95677e1953574d97f1592c4283824_JaffaCakes118.exe	56
PID 1076 wrote to memory of 3496	1076	25d95677e1953574d97f1592c4283824_JaffaCakes118.exe	56
PID 1076 wrote to memory of 3496	1076	25d95677e1953574d97f1592c4283824_JaffaCakes118.exe	56
PID 1076 wrote to memory of 3496	1076	25d95677e1953574d97f1592c4283824_JaffaCakes118.exe	56
PID 1076 wrote to memory of 3496	1076	25d95677e1953574d97f1592c4283824_JaffaCakes118.exe	56
PID 1076 wrote to memory of 3496	1076	25d95677e1953574d97f1592c4283824_JaffaCakes118.exe	56

memory/1076-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1076-3-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1076-9-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3496-2-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/3496-5-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download