38cf210460109ef30e7ce49b15ee5f7a2a36576aa3a4a204de22d7180164fa96

Analysis

max time kernel
125s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08/07/2024, 16:07

Target

2cf71b9040e5e2803bbf206b337f5f23_JaffaCakes118.exe
Size

168KB
MD5

2cf71b9040e5e2803bbf206b337f5f23
SHA1

872c75e58724ef981b305477b9cfe28c9f1868f6
SHA256

38cf210460109ef30e7ce49b15ee5f7a2a36576aa3a4a204de22d7180164fa96
SHA512

0dc0f728fd93912c528febd616bed08e8393f25d383642c48db8156c1593ed723565092330d7a6bc0cfe9d66508b41ed390a740c4d99f0f0a77f9223d359353f
SSDEEP

3072:EViP5D1r0aAy882d5spp4VfwngymwFc298J/Q+UmP:EVE5SEUuHy163m

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
1964	2cf71b9040e5e2803bbf206b337f5f23_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 1964 wrote to memory of 732	1964	2cf71b9040e5e2803bbf206b337f5f23_JaffaCakes118.exe	92
PID 1964 wrote to memory of 732	1964	2cf71b9040e5e2803bbf206b337f5f23_JaffaCakes118.exe	92
PID 1964 wrote to memory of 732	1964	2cf71b9040e5e2803bbf206b337f5f23_JaffaCakes118.exe	92
PID 1964 wrote to memory of 732	1964	2cf71b9040e5e2803bbf206b337f5f23_JaffaCakes118.exe	92
PID 1964 wrote to memory of 732	1964	2cf71b9040e5e2803bbf206b337f5f23_JaffaCakes118.exe	92

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3712,i,13421008738336098502,1902686380018635081,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
1⤵
PID:3756

memory/1964-0-0x0000000000400000-0x0000000000436000-memory.dmp

Filesize
216KB

Download
memory/1964-1-0x00000000021D0000-0x00000000021D1000-memory.dmp

Filesize
4KB

Download
memory/1964-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1964-3-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1964-4-0x0000000000420000-0x000000000042E000-memory.dmp

Filesize
56KB

Download