Analysis
-
max time kernel
92s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
06/07/2024, 18:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2931655282414dfbd63781c84302a2f6_JaffaCakes118.exe
Resource
win7-20240705-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2931655282414dfbd63781c84302a2f6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
1 signatures
150 seconds
General
-
Target
2931655282414dfbd63781c84302a2f6_JaffaCakes118.exe
-
Size
72KB
-
MD5
2931655282414dfbd63781c84302a2f6
-
SHA1
88b3f789856978d65d25751e70aa0cd18418284b
-
SHA256
cf51a6f142e84f1041b25d1617a084bc01d676028eb45b33f782e36c4142ddc7
-
SHA512
79764e204e75b5b90aa4f04358af82124333477bd4c3bb091d6093091967400c58beff694842ad4006d4aa06aad4111b86887686be08bc09113be352dede7356
-
SSDEEP
1536:ILAlF2lsXlp5XwC9KcL+XMb+KR0Nc8QsJq39:Ugm+VKRXe0Nc8QsC9
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1020 wrote to memory of 3844 1020 2931655282414dfbd63781c84302a2f6_JaffaCakes118.exe 85 PID 1020 wrote to memory of 3844 1020 2931655282414dfbd63781c84302a2f6_JaffaCakes118.exe 85 PID 1020 wrote to memory of 3844 1020 2931655282414dfbd63781c84302a2f6_JaffaCakes118.exe 85