e37ac1dedead686c8aaee02c406429c624843505517899b935d3edae311bdb32

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
07-07-2024 23:45

Target

2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe
Size

436KB
MD5

2a37fee12ac0ea3c3a74be96ab309fa6
SHA1

f301ba399f817eb8f8a0733131ff98437253464c
SHA256

e37ac1dedead686c8aaee02c406429c624843505517899b935d3edae311bdb32
SHA512

48e2b71579eaad32e8f4f7ba9ab36fe0d35aa2e19fde86e19b5389d1d8b8bf8b3e3638e39cd5c95cf5c49f1e22f2fce56c1ade8bc8d1b8891571dfa9a6ef325d
SSDEEP

6144:U8JEdF2idZecnl20lHRxp3g/qI3AhxX6+eIBeRZxfV+D+YQvDsDZn0tevhdQ:CF3Z4mxxc9A3fxBeJfkMsDZn1Q

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2020 set thread context of 2812	2020	2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe	31

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2020 wrote to memory of 2812	2020	2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe	31
PID 2020 wrote to memory of 2812	2020	2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe	31
PID 2020 wrote to memory of 2812	2020	2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe	31
PID 2020 wrote to memory of 2812	2020	2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe	31
PID 2020 wrote to memory of 2812	2020	2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe	31
PID 2020 wrote to memory of 2812	2020	2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe	31

C:\Users\Admin\AppData\Local\Temp\2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2020
- C:\Users\Admin\AppData\Local\Temp\2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\2a37fee12ac0ea3c3a74be96ab309fa6_JaffaCakes118.exe
  2⤵
  PID:2812

memory/2020-0-0x0000000019140000-0x00000000191D5000-memory.dmp

Filesize
596KB

Download
memory/2020-1-0x0000000019140000-0x00000000191D5000-memory.dmp

Filesize
596KB

Download
memory/2020-2-0x00000000191C0000-0x00000000191D5000-memory.dmp

Filesize
84KB

Download
memory/2020-3-0x0000000019140000-0x00000000191D5000-memory.dmp

Filesize
596KB

Download
memory/2020-5-0x0000000019140000-0x00000000191D5000-memory.dmp

Filesize
596KB

Download
memory/2020-13-0x0000000019140000-0x00000000191D5000-memory.dmp

Filesize
596KB

Download
memory/2020-4-0x0000000019140000-0x00000000191D5000-memory.dmp

Filesize
596KB

Download
memory/2812-12-0x0000000019140000-0x00000000191D5000-memory.dmp

Filesize
596KB

Download
memory/2812-11-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2812-9-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2812-8-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2812-6-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download