cf4e3fec7c6ef57ee686f445718e0fba0ef5de917c605fac46bc85d7061386c3

Analysis

max time kernel
149s
max time network
124s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
11/07/2024, 20:22

Target

3a96f27a826475539b76a343a92610bf_JaffaCakes118.exe
Size

96KB
MD5

3a96f27a826475539b76a343a92610bf
SHA1

e54f8361de572fb55b9dfd80ef9f735f8877959c
SHA256

cf4e3fec7c6ef57ee686f445718e0fba0ef5de917c605fac46bc85d7061386c3
SHA512

7572cd523e70045557651ef0499e7cb2012bd0dd88a62256b11f7f2727a1facdec90dd3aed91597973e35830d7cc1fca0e57ef838839571f1a83c1c992921f51
SSDEEP

1536:N3GEJY3+7/wm91IULMK9syxK7txiOGboI18zo9HEXIMXPK0gZhF0YETxLXqak/a:NtJsGP4K8D3GNKyHWISy0gl0Y86bC

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2448	3a96f27a826475539b76a343a92610bf_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 1376	2448	3a96f27a826475539b76a343a92610bf_JaffaCakes118.exe	28
PID 2448 wrote to memory of 1376	2448	3a96f27a826475539b76a343a92610bf_JaffaCakes118.exe	28
PID 2448 wrote to memory of 1376	2448	3a96f27a826475539b76a343a92610bf_JaffaCakes118.exe	28
PID 2448 wrote to memory of 1376	2448	3a96f27a826475539b76a343a92610bf_JaffaCakes118.exe	28
PID 2448 wrote to memory of 1376	2448	3a96f27a826475539b76a343a92610bf_JaffaCakes118.exe	28
PID 2448 wrote to memory of 1376	2448	3a96f27a826475539b76a343a92610bf_JaffaCakes118.exe	28
PID 2448 wrote to memory of 1376	2448	3a96f27a826475539b76a343a92610bf_JaffaCakes118.exe	28

memory/1376-3-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1376-2-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1376-4-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1376-8-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2448-1-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2448-0-0x0000000000360000-0x0000000000362000-memory.dmp

Filesize
8KB

Download
memory/2448-7-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download