42ba10d33dcf1f0089a4de2fa7038e7f709147f35e8a860ecd801ea61aafb73d

Analysis

max time kernel
148s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
07/07/2024, 23:24

Target

2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118.exe
Size

80KB
MD5

2a27ad747e27e9d34f35b9d0225d40b0
SHA1

8abdd0d7a49796a53d9f98a9ebedf0410ed656d0
SHA256

42ba10d33dcf1f0089a4de2fa7038e7f709147f35e8a860ecd801ea61aafb73d
SHA512

ec28c75cb6ae970c383d1564a6e8879df558d881bad391330aa01cb34f8f760d3d2a86da1dc34741e82a29528b0c1c2108acaa26333335b2ae14644cdf2e5906
SSDEEP

1536:mIErCaljHQFDii+Pf2dBrchcMUBWF9yDiVw9YmB4:IrjwFii6f2v1Of7w9YmB4

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
3616	2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 3616 wrote to memory of 3484	3616	2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118.exe	85
PID 3616 wrote to memory of 3484	3616	2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118.exe	85
PID 3616 wrote to memory of 3484	3616	2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118.exe	85
PID 3616 wrote to memory of 3484	3616	2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118.exe	85
PID 3616 wrote to memory of 3484	3616	2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118.exe	85

memory/3616-0-0x00000000004B0000-0x00000000004B1000-memory.dmp

Filesize
4KB

Download
memory/3616-2-0x00000000004E0000-0x00000000004F2000-memory.dmp

Filesize
72KB

Download
memory/3616-4-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3616-6-0x0000000000520000-0x000000000052E000-memory.dmp

Filesize
56KB

Download
memory/3616-7-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download