c5b9798e4bbe34b5f98c78e7303fc50b8fd7a04a358d58b3bffc70069e67fbe4

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08/07/2024, 14:38

Target

2cb8e5ce8f73ba0bb93c3e93d8804f39_JaffaCakes118.exe
Size

76KB
MD5

2cb8e5ce8f73ba0bb93c3e93d8804f39
SHA1

9f88ef4c142db727d1995e54f7826f479c3b2f37
SHA256

c5b9798e4bbe34b5f98c78e7303fc50b8fd7a04a358d58b3bffc70069e67fbe4
SHA512

927adb0aa9e7a1383afd0e08dfbe970686c078c770ee0b583c9e2e4a616f701c0716fac3d5e21af88ff8aeeb34c380ef6970a6cab8e060902590d298298c9000
SSDEEP

1536:xY2sLbku3JWVpWyyQgYZZ9wghtbX6Vl43vEa6szS:xY2UJWIdWZ9w8bKVleEa6szS

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
832	2cb8e5ce8f73ba0bb93c3e93d8804f39_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 832 wrote to memory of 4100	832	2cb8e5ce8f73ba0bb93c3e93d8804f39_JaffaCakes118.exe	83
PID 832 wrote to memory of 4100	832	2cb8e5ce8f73ba0bb93c3e93d8804f39_JaffaCakes118.exe	83
PID 832 wrote to memory of 4100	832	2cb8e5ce8f73ba0bb93c3e93d8804f39_JaffaCakes118.exe	83
PID 832 wrote to memory of 4100	832	2cb8e5ce8f73ba0bb93c3e93d8804f39_JaffaCakes118.exe	83
PID 832 wrote to memory of 4100	832	2cb8e5ce8f73ba0bb93c3e93d8804f39_JaffaCakes118.exe	83

memory/832-0-0x00000000005D0000-0x00000000005D1000-memory.dmp

Filesize
4KB

Download
memory/832-2-0x00000000005E0000-0x00000000005F2000-memory.dmp

Filesize
72KB

Download
memory/832-4-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/832-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/832-6-0x0000000000630000-0x000000000063E000-memory.dmp

Filesize
56KB

Download