4984528ad2e1236ee48bb0d1c304f3aecbb5df7fbae0856a193167dab9d907a0

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
11/07/2024, 13:26

Target

394ec715c0bbc149221fd1d17583830e_JaffaCakes118.exe
Size

117KB
MD5

394ec715c0bbc149221fd1d17583830e
SHA1

704f8de0ef953ad4c0723091d2029b9baacb21e5
SHA256

4984528ad2e1236ee48bb0d1c304f3aecbb5df7fbae0856a193167dab9d907a0
SHA512

b864ccc838df5de21a9f38c571351b4460b220462e1ab81118c0d0582cfb6a4206d2cdde1af2b66246c310ede1e49b570f13f0e162d47e7e8dbc6a8c4cc2712a
SSDEEP

1536:B7kDiTfftZVmhf7t5DW5LU8EKV0mVwLJpAK5SYv9iUu8Vf3i66o/+1qPvr:B7qqffVmVB5DW5L1OQw7v9du8Vm1qPj

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
4792	394ec715c0bbc149221fd1d17583830e_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 4792 wrote to memory of 4856	4792	394ec715c0bbc149221fd1d17583830e_JaffaCakes118.exe	83
PID 4792 wrote to memory of 4856	4792	394ec715c0bbc149221fd1d17583830e_JaffaCakes118.exe	83
PID 4792 wrote to memory of 4856	4792	394ec715c0bbc149221fd1d17583830e_JaffaCakes118.exe	83
PID 4792 wrote to memory of 4856	4792	394ec715c0bbc149221fd1d17583830e_JaffaCakes118.exe	83
PID 4792 wrote to memory of 4856	4792	394ec715c0bbc149221fd1d17583830e_JaffaCakes118.exe	83

memory/4792-0-0x00000000005D0000-0x00000000005D2000-memory.dmp

Filesize
8KB

Download
memory/4792-1-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/4792-4-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/4792-3-0x0000000000610000-0x000000000061E000-memory.dmp

Filesize
56KB

Download