46ce910c69bba96207764a2f1e106b0691059e186f386492829cca4aef792bc1

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
10/07/2024, 05:46

Target

3386d4518f671c1dcd13f9797fe85b6b_JaffaCakes118.dll
Size

45KB
MD5

3386d4518f671c1dcd13f9797fe85b6b
SHA1

781a89866eafacacc81c4b68aeb626d02ddabfce
SHA256

46ce910c69bba96207764a2f1e106b0691059e186f386492829cca4aef792bc1
SHA512

ede2e2b1d7a8823d8a9b2b12e5d58e1ead7b1d9cd05fe4ad8c05526aba297f1bb1bbe53921645ddaaf295828f9af64268fb39ee70cac8f2adaa2b18116af13f1
SSDEEP

768:fjTOV5BlRWXKpIcPg3kaKry3QL//ucGoK6FI38o9c9U1QjRhz9HqvJckxeG:mv4XKpIuIkfLnkCnEfwN9qh3MG

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 2144	2368	rundll32.exe	30
PID 2368 wrote to memory of 2144	2368	rundll32.exe	30
PID 2368 wrote to memory of 2144	2368	rundll32.exe	30
PID 2368 wrote to memory of 2144	2368	rundll32.exe	30
PID 2368 wrote to memory of 2144	2368	rundll32.exe	30
PID 2368 wrote to memory of 2144	2368	rundll32.exe	30
PID 2368 wrote to memory of 2144	2368	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3386d4518f671c1dcd13f9797fe85b6b_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\3386d4518f671c1dcd13f9797fe85b6b_JaffaCakes118.dll,#1
  2⤵
  PID:2144