3662e62dff4998798b54d5ef4bfd731012b0c83d89554bf3c4b903cb44470205

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 12:31

Target

30629100a58429806dac95b2ec2e66a6_JaffaCakes118.exe
Size

99KB
MD5

30629100a58429806dac95b2ec2e66a6
SHA1

f2f3f4f83c1103e9dbd6cf5c414ef855a03c7ebe
SHA256

3662e62dff4998798b54d5ef4bfd731012b0c83d89554bf3c4b903cb44470205
SHA512

eb00c955a74a4250e301d06ce7ee5b52c80985be22947e17b1aab0dda240989ce3bab85c7ee943247dcd44f0f5997c9790e20aeaf98d52b0e31f8c5e54d78338
SSDEEP

1536:siB+jNe7+logd6yDBCfFUKd4y/MKoSTBwn9GyQqJi+sXn47yLTLO:stNFzZtCfXLoSTBeGyQDDGyv

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
4520	30629100a58429806dac95b2ec2e66a6_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 4520 wrote to memory of 1420	4520	30629100a58429806dac95b2ec2e66a6_JaffaCakes118.exe	82
PID 4520 wrote to memory of 1420	4520	30629100a58429806dac95b2ec2e66a6_JaffaCakes118.exe	82
PID 4520 wrote to memory of 1420	4520	30629100a58429806dac95b2ec2e66a6_JaffaCakes118.exe	82
PID 4520 wrote to memory of 1420	4520	30629100a58429806dac95b2ec2e66a6_JaffaCakes118.exe	82
PID 4520 wrote to memory of 1420	4520	30629100a58429806dac95b2ec2e66a6_JaffaCakes118.exe	82

memory/4520-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/4520-1-0x0000000002300000-0x0000000002302000-memory.dmp

Filesize
8KB

Download
memory/4520-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/4520-4-0x0000000000420000-0x000000000042E000-memory.dmp

Filesize
56KB

Download