3521b844b842297653a44c6af9415026a417a8f0826fc502c2134510d35713bb

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
11-07-2024 13:46

Target

39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe
Size

192KB
MD5

39605c587e7aaa2305b5105a6897be08
SHA1

7f9fdc2d6cd5a4e8747792ff4ccff89c6a6af7dc
SHA256

3521b844b842297653a44c6af9415026a417a8f0826fc502c2134510d35713bb
SHA512

47e6166f0200bbcc17354a64ced12badfd83a95ef03643b705f6e80f7b1a564a26d5717aefb206b32b5a358e819d3529839c27cc927167467aa50936838c6133
SSDEEP

6144:mQbCCdj8P5nk/UCCRl3Vs63P/atZuyPBEr7tl:mQbCCh8xk8CA933atZGr7tl

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2204	39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe
2204	39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 1440	2204	39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe	20
PID 2204 wrote to memory of 1440	2204	39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe	20
PID 2204 wrote to memory of 1440	2204	39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe	20
PID 2204 wrote to memory of 1440	2204	39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe	20

memory/1440-4-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1440-8-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2204-0-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/2204-1-0x0000000000401000-0x0000000000403000-memory.dmp

Filesize
8KB

Download
memory/2204-2-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/2204-7-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/2204-17-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download