3521b844b842297653a44c6af9415026a417a8f0826fc502c2134510d35713bb

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
11-07-2024 13:46

Target

39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe
Size

192KB
MD5

39605c587e7aaa2305b5105a6897be08
SHA1

7f9fdc2d6cd5a4e8747792ff4ccff89c6a6af7dc
SHA256

3521b844b842297653a44c6af9415026a417a8f0826fc502c2134510d35713bb
SHA512

47e6166f0200bbcc17354a64ced12badfd83a95ef03643b705f6e80f7b1a564a26d5717aefb206b32b5a358e819d3529839c27cc927167467aa50936838c6133
SSDEEP

6144:mQbCCdj8P5nk/UCCRl3Vs63P/atZuyPBEr7tl:mQbCCh8xk8CA933atZGr7tl

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3632 wrote to memory of 3480	3632	39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe	56
PID 3632 wrote to memory of 3480	3632	39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe	56
PID 3632 wrote to memory of 3480	3632	39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe	56
PID 3632 wrote to memory of 3480	3632	39605c587e7aaa2305b5105a6897be08_JaffaCakes118.exe	56

memory/3480-5-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3480-6-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/3632-0-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/3632-1-0x0000000000401000-0x0000000000403000-memory.dmp

Filesize
8KB

Download
memory/3632-2-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/3632-3-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/3632-9-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download