16639b58f0951ed3272b637ea59e465b317cf2fe98c26266132c9c4c925f5ba4

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
11/07/2024, 14:28

Target

39825f90f32324ccb17dd5fc121d522b_JaffaCakes118.dll
Size

14KB
MD5

39825f90f32324ccb17dd5fc121d522b
SHA1

87fbfce73a97f17a171ffc27a6fa6b52e1944d9e
SHA256

16639b58f0951ed3272b637ea59e465b317cf2fe98c26266132c9c4c925f5ba4
SHA512

a5196ee65fb5b761904524a5e0212fb549b588cab82d480746afdb8623fa93520d50f180d9b9f97a89836eb909b4399f1092e33cebab1f0f153a19c826a05bca
SSDEEP

384:NcA3ZGPNikcapYaqvA4VOa4QxV3eawYcQQlmGwnYrxi2K:NV3NapiYfKNzBf5GgUx0

Score

1^/10

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
480	Process not Found

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2912 wrote to memory of 2996	2912	rundll32.exe	30
PID 2912 wrote to memory of 2996	2912	rundll32.exe	30
PID 2912 wrote to memory of 2996	2912	rundll32.exe	30
PID 2912 wrote to memory of 2996	2912	rundll32.exe	30
PID 2912 wrote to memory of 2996	2912	rundll32.exe	30
PID 2912 wrote to memory of 2996	2912	rundll32.exe	30
PID 2912 wrote to memory of 2996	2912	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\39825f90f32324ccb17dd5fc121d522b_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2912
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\39825f90f32324ccb17dd5fc121d522b_JaffaCakes118.dll,#1
  2⤵
  PID:2996

memory/2996-4-0x0000000025000000-0x000000002501F000-memory.dmp

Filesize
124KB

Download
memory/2996-3-0x0000000025017000-0x0000000025018000-memory.dmp

Filesize
4KB

Download
memory/2996-2-0x0000000025000000-0x000000002501F000-memory.dmp

Filesize
124KB

Download
memory/2996-1-0x0000000025000000-0x000000002501F000-memory.dmp

Filesize
124KB

Download
memory/2996-0-0x0000000025000000-0x000000002501F000-memory.dmp

Filesize
124KB

Download