9610c050ee28872e125f5aa1ba5a64b6e87736b19669c8fa54269d821651cbed

Analysis

max time kernel
149s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
12/07/2024, 08:21

Target

3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe
Size

112KB
MD5

3ca37a505ba1d7034c86d163079ed26c
SHA1

8413bf137492bfeffe9f87d8b5c09b5b7fbea960
SHA256

9610c050ee28872e125f5aa1ba5a64b6e87736b19669c8fa54269d821651cbed
SHA512

56bacb14ec0a8457c58dad4148641167ba2ebecca376f33864280c07c7e56761e8b9cc6f30d3bc00a307bbc5ff40540c9017210434c8aa249ab3aba1c833f73c
SSDEEP

1536:DKl6xuCUY9QXbaK4+7slRKH0B0F6OHchMWFbi69kZqcY5FAsqYR:DvMCLpiSXuF6OHhWFWt9YfqY

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2524	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2524 wrote to memory of 1984	2524	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	30
PID 2524 wrote to memory of 1984	2524	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	30
PID 2524 wrote to memory of 1984	2524	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	30
PID 2524 wrote to memory of 1984	2524	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	30
PID 2524 wrote to memory of 1984	2524	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	30
PID 2524 wrote to memory of 1984	2524	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	30
PID 2524 wrote to memory of 1984	2524	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	30

memory/1984-1-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1984-0-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1984-4-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1984-8-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2524-3-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2524-2-0x00000000001E0000-0x00000000001E2000-memory.dmp

Filesize
8KB

Download