2e8967c18ace73dfc751ecd44dbc80db28d6772c046c7778d459985050cecf16

Analysis

max time kernel
98s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 11:32

Target

30338df6c1ba25d28bd8dbce9edbe0df_JaffaCakes118.exe
Size

108KB
MD5

30338df6c1ba25d28bd8dbce9edbe0df
SHA1

879e3d0b0360e4dbbf7b68bc0046fb51bc882feb
SHA256

2e8967c18ace73dfc751ecd44dbc80db28d6772c046c7778d459985050cecf16
SHA512

8be5f65117a8eb32eb77136767ca85172963cbc4c5536600ba1fe78b92190a29de776d59696116f68f3e536dbcd7ad2f3ae8a3d5bf28b30f02953d8576b24b45
SSDEEP

1536:XkrbsVfTT8Co91XQZ3MD3ZMNGupQBJsaPYIOXAig6JRxJEHp3B4d3i6EPwRvtOcv:XkXsVfTHqRy81MUuIzIRsHtiPtOcv

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2004	30338df6c1ba25d28bd8dbce9edbe0df_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2004 wrote to memory of 1072	2004	30338df6c1ba25d28bd8dbce9edbe0df_JaffaCakes118.exe	82
PID 2004 wrote to memory of 1072	2004	30338df6c1ba25d28bd8dbce9edbe0df_JaffaCakes118.exe	82
PID 2004 wrote to memory of 1072	2004	30338df6c1ba25d28bd8dbce9edbe0df_JaffaCakes118.exe	82
PID 2004 wrote to memory of 1072	2004	30338df6c1ba25d28bd8dbce9edbe0df_JaffaCakes118.exe	82
PID 2004 wrote to memory of 1072	2004	30338df6c1ba25d28bd8dbce9edbe0df_JaffaCakes118.exe	82

memory/2004-1-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2004-0-0x0000000002040000-0x0000000002042000-memory.dmp

Filesize
8KB

Download
memory/2004-3-0x0000000002080000-0x000000000208E000-memory.dmp

Filesize
56KB

Download