9610c050ee28872e125f5aa1ba5a64b6e87736b19669c8fa54269d821651cbed

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 08:21

Target

3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe
Size

112KB
MD5

3ca37a505ba1d7034c86d163079ed26c
SHA1

8413bf137492bfeffe9f87d8b5c09b5b7fbea960
SHA256

9610c050ee28872e125f5aa1ba5a64b6e87736b19669c8fa54269d821651cbed
SHA512

56bacb14ec0a8457c58dad4148641167ba2ebecca376f33864280c07c7e56761e8b9cc6f30d3bc00a307bbc5ff40540c9017210434c8aa249ab3aba1c833f73c
SSDEEP

1536:DKl6xuCUY9QXbaK4+7slRKH0B0F6OHchMWFbi69kZqcY5FAsqYR:DvMCLpiSXuF6OHhWFWt9YfqY

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2780	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2780 wrote to memory of 2476	2780	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	83
PID 2780 wrote to memory of 2476	2780	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	83
PID 2780 wrote to memory of 2476	2780	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	83
PID 2780 wrote to memory of 2476	2780	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	83
PID 2780 wrote to memory of 2476	2780	3ca37a505ba1d7034c86d163079ed26c_JaffaCakes118.exe	83

memory/2780-0-0x0000000002190000-0x0000000002192000-memory.dmp

Filesize
8KB

Download
memory/2780-1-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2780-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2780-3-0x00000000021C0000-0x00000000021CE000-memory.dmp

Filesize
56KB

Download