6caeba26570a1e694936f3956dafac060e3b0e3908157f15fe3695c6d871cc17

Analysis

max time kernel
93s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 23:26

Target

326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe
Size

32KB
MD5

326ad778fd9980165926e6731e97ae1a
SHA1

fba4c9ff2efbc204d8f77d5316bb60f3abed3b7f
SHA256

6caeba26570a1e694936f3956dafac060e3b0e3908157f15fe3695c6d871cc17
SHA512

e1ba7d6c16e1a848f77e0637fd6e143f4b19fa2e6d4eea6d271306c23784cb5ee13e5cbfc15b5d11d7a3f90197952249c3bff9b6f6193c766e7226071d6824db
SSDEEP

768:FKap/ecE7OE3+5IzX8TP/uhiPolDT0DPaQ:/pY7O6+5I78oluPa

Score

5^/10

Suspicious use of SetThreadContext 2 IoCs

description	pid	Process	procid_target
PID 4908 set thread context of 2456	4908	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	81
PID 2456 set thread context of 4960	2456	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	84

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2456	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe
4960	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 4908 wrote to memory of 2456	4908	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	81
PID 4908 wrote to memory of 2456	4908	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	81
PID 4908 wrote to memory of 2456	4908	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	81
PID 4908 wrote to memory of 2456	4908	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	81
PID 4908 wrote to memory of 2456	4908	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	81
PID 4908 wrote to memory of 2456	4908	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	81
PID 4908 wrote to memory of 2456	4908	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	81
PID 2456 wrote to memory of 4960	2456	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	84
PID 2456 wrote to memory of 4960	2456	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	84
PID 2456 wrote to memory of 4960	2456	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	84
PID 2456 wrote to memory of 4960	2456	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	84
PID 2456 wrote to memory of 4960	2456	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	84
PID 2456 wrote to memory of 4960	2456	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	84
PID 2456 wrote to memory of 4960	2456	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	84
PID 2456 wrote to memory of 4960	2456	326ad778fd9980165926e6731e97ae1a_JaffaCakes118.exe	84

memory/2456-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/2456-0-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/2456-4-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/2456-5-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/2456-7-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/2456-6-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/2456-9-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/2456-17-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/4908-3-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/4960-12-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/4960-14-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/4960-20-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download