9066da5302631fbbcb134b2d223a5847dae2c6a8ade2c40de0b3eba6737225fd

Analysis

max time kernel
16s
max time network
18s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
10/07/2024, 07:57

Target

33e24b480ed3dd0caefb269f2b2fe9e3_JaffaCakes118.dll
Size

8KB
MD5

33e24b480ed3dd0caefb269f2b2fe9e3
SHA1

384e88ee5dca93dd7ad024e55a4aaccd92bc730c
SHA256

9066da5302631fbbcb134b2d223a5847dae2c6a8ade2c40de0b3eba6737225fd
SHA512

bd76b822197a886730c5087cba332522ca1c6575c73be3704a5e4ff6d72f84e20a4058da299ad57af4a5b1ff0c03e242f1f3de6960cef136315682a2316aae93
SSDEEP

96:WCWzaNc1vieKD5o/AgSqf/UCfQCuAW/Bk/Aq3sMAT1Bwe76nN5dISAE76xY:B4vqoPJpfbunVKyUnN5yRvm

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 1696	2204	rundll32.exe	29
PID 2204 wrote to memory of 1696	2204	rundll32.exe	29
PID 2204 wrote to memory of 1696	2204	rundll32.exe	29
PID 2204 wrote to memory of 1696	2204	rundll32.exe	29
PID 2204 wrote to memory of 1696	2204	rundll32.exe	29
PID 2204 wrote to memory of 1696	2204	rundll32.exe	29
PID 2204 wrote to memory of 1696	2204	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\33e24b480ed3dd0caefb269f2b2fe9e3_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\33e24b480ed3dd0caefb269f2b2fe9e3_JaffaCakes118.dll,#1
  2⤵
  PID:1696