83bd905a38ef1c21b084467753a6135cc1c8486ba13ae59011035cfa3e27c68d

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08/07/2024, 05:59

Target

2b3a7db80a0f4866f0e48d20243f5896_JaffaCakes118.exe
Size

77KB
MD5

2b3a7db80a0f4866f0e48d20243f5896
SHA1

4ae2029407cc0f127dae80b2ddd43268628ed392
SHA256

83bd905a38ef1c21b084467753a6135cc1c8486ba13ae59011035cfa3e27c68d
SHA512

c75546404a4b10dfc01530428d161796f04d13cc7805c2973dad0223efd568612589f343dd1e5a506535d90e03a2a5da9c66ca848ef199c9e9a993533dddca8f
SSDEEP

1536:4GiCaTkXqEVq/JMjMK7C330Y+/UQaRCeWrb/GWFDqQnuPLYK4q:49XAqWsSMKTD/UNRCembeq2oucK4q

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
3632	2b3a7db80a0f4866f0e48d20243f5896_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 3632 wrote to memory of 3440	3632	2b3a7db80a0f4866f0e48d20243f5896_JaffaCakes118.exe	82
PID 3632 wrote to memory of 3440	3632	2b3a7db80a0f4866f0e48d20243f5896_JaffaCakes118.exe	82
PID 3632 wrote to memory of 3440	3632	2b3a7db80a0f4866f0e48d20243f5896_JaffaCakes118.exe	82
PID 3632 wrote to memory of 3440	3632	2b3a7db80a0f4866f0e48d20243f5896_JaffaCakes118.exe	82
PID 3632 wrote to memory of 3440	3632	2b3a7db80a0f4866f0e48d20243f5896_JaffaCakes118.exe	82

memory/3632-0-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download
memory/3632-1-0x00000000005C0000-0x00000000005C1000-memory.dmp

Filesize
4KB

Download
memory/3632-4-0x00000000006E0000-0x00000000006F2000-memory.dmp

Filesize
72KB

Download
memory/3632-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3632-8-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3632-7-0x0000000000A30000-0x0000000000A3E000-memory.dmp

Filesize
56KB

Download