bc4b35b90ddaa4e4f51263e9fb19ba303dba0f2d594a04d19d09eaf2b4cc874f

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
11/07/2024, 06:02

Target

37f7d36cc1ba8e33f86335ab911ba860_JaffaCakes118.exe
Size

85KB
MD5

37f7d36cc1ba8e33f86335ab911ba860
SHA1

2da5bf11f517bb95fd2c75e1b25a23b15b0f171b
SHA256

bc4b35b90ddaa4e4f51263e9fb19ba303dba0f2d594a04d19d09eaf2b4cc874f
SHA512

582c96f7b02ca93627c4246cff6ee559b0812295e84df74a8ea284b03b0877532a918ded27abeb01b3ac486ee5b274d8ec5e743b2c21c21651f2035c930b302f
SSDEEP

1536:WeX9wBNup1oKst0is5L4nw6uM80CbB5UuUbVNd2G3jA:PX9EnsNiw6uM8RbBauUbVX2Gs

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2652 wrote to memory of 2692	2652	37f7d36cc1ba8e33f86335ab911ba860_JaffaCakes118.exe	30
PID 2652 wrote to memory of 2692	2652	37f7d36cc1ba8e33f86335ab911ba860_JaffaCakes118.exe	30
PID 2652 wrote to memory of 2692	2652	37f7d36cc1ba8e33f86335ab911ba860_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\37f7d36cc1ba8e33f86335ab911ba860_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\37f7d36cc1ba8e33f86335ab911ba860_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2652
- C:\Users\Admin\AppData\Local\Temp\37f7d36cc1ba8e33f86335ab911ba860_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\37f7d36cc1ba8e33f86335ab911ba860_JaffaCakes118.exe
  2⤵
  PID:2692

memory/2652-0-0x000007FEF55EE000-0x000007FEF55EF000-memory.dmp

Filesize
4KB

Download
memory/2652-1-0x000007FEF5330000-0x000007FEF5CCD000-memory.dmp

Filesize
9.6MB

Download