0f05b7baa6c6cfdbe48ca6a963c493238dbfbc15d2d2f46a9f551f6ebdf2d90f

Analysis

max time kernel
120s
max time network
131s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
10/07/2024, 10:01

Target

3442e74bf33b8dbf34158431943b8805_JaffaCakes118.exe
Size

660KB
MD5

3442e74bf33b8dbf34158431943b8805
SHA1

8fb6e8b333fb95af96c3702bb7024f27d78b7e9c
SHA256

0f05b7baa6c6cfdbe48ca6a963c493238dbfbc15d2d2f46a9f551f6ebdf2d90f
SHA512

fbc1a6efc19c64b02f06bde98d1aea3d4668294d3303acbfa5faae32e0d288756b5532e3dd086910621faf094b144cff2f102ae0c5c52c6d7b5e216f66ffb5bd
SSDEEP

12288:JuDEayg91vTq6570pI9h5WP745hHXvUXJVqp13ig2PeqjS2:Ju3HPTqA7CI9hU0cJVGigDqW2

Score

1^/10

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\tz1237413307b.uej	3442e74bf33b8dbf34158431943b8805_JaffaCakes118.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\tz1237413307b.uej\ = 98f7e9eb2cc9f542fcf6bec30aeda6e547819a830803affd	3442e74bf33b8dbf34158431943b8805_JaffaCakes118.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2204	3442e74bf33b8dbf34158431943b8805_JaffaCakes118.exe
2204	3442e74bf33b8dbf34158431943b8805_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 1216	2204	3442e74bf33b8dbf34158431943b8805_JaffaCakes118.exe	21
PID 2204 wrote to memory of 1216	2204	3442e74bf33b8dbf34158431943b8805_JaffaCakes118.exe	21
PID 2204 wrote to memory of 1216	2204	3442e74bf33b8dbf34158431943b8805_JaffaCakes118.exe	21
PID 2204 wrote to memory of 1216	2204	3442e74bf33b8dbf34158431943b8805_JaffaCakes118.exe	21
PID 2204 wrote to memory of 1216	2204	3442e74bf33b8dbf34158431943b8805_JaffaCakes118.exe	21
PID 2204 wrote to memory of 1216	2204	3442e74bf33b8dbf34158431943b8805_JaffaCakes118.exe	21

memory/1216-6-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1216-13-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2204-0-0x0000000000400000-0x00000000004BE000-memory.dmp

Filesize
760KB

Download
memory/2204-3-0x0000000000401000-0x0000000000421000-memory.dmp

Filesize
128KB

Download
memory/2204-4-0x0000000000400000-0x00000000004BE000-memory.dmp

Filesize
760KB

Download