e51ee26771768d7bea3dab269fb07b1e6935e1c10560f9e85724152fed279066

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
12-07-2024 19:03

Target

3e832f23e51e7f594ef0a10d2d8546b8_JaffaCakes118.exe
Size

57KB
MD5

3e832f23e51e7f594ef0a10d2d8546b8
SHA1

147c38d9103defb0e0762fee6c9dbc68686267ca
SHA256

e51ee26771768d7bea3dab269fb07b1e6935e1c10560f9e85724152fed279066
SHA512

47eff84e18a517fe40d971569e4ccff353626be93896b72c5f6f2b5b5d4ff4418a0ffc1b8d59072828a3230e29b65de58202df5c63288b3f09715fc7d34a34ae
SSDEEP

1536:NZPsbNwyjR9zEDaSRK3g8OOEY7uV1uigWaXt:NZVqbKakHDYs1uiqd

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2860	3e832f23e51e7f594ef0a10d2d8546b8_JaffaCakes118.exe
2860	3e832f23e51e7f594ef0a10d2d8546b8_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2860 wrote to memory of 1120	2860	3e832f23e51e7f594ef0a10d2d8546b8_JaffaCakes118.exe	20
PID 2860 wrote to memory of 1120	2860	3e832f23e51e7f594ef0a10d2d8546b8_JaffaCakes118.exe	20
PID 2860 wrote to memory of 1120	2860	3e832f23e51e7f594ef0a10d2d8546b8_JaffaCakes118.exe	20
PID 2860 wrote to memory of 1120	2860	3e832f23e51e7f594ef0a10d2d8546b8_JaffaCakes118.exe	20
PID 2860 wrote to memory of 1120	2860	3e832f23e51e7f594ef0a10d2d8546b8_JaffaCakes118.exe	20
PID 2860 wrote to memory of 1120	2860	3e832f23e51e7f594ef0a10d2d8546b8_JaffaCakes118.exe	20

memory/1120-10-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1120-18-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2860-7-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2860-13-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2860-9-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2860-8-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2860-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2860-6-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2860-5-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2860-4-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2860-3-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2860-2-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2860-1-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2860-14-0x000000000041D000-0x000000000041F000-memory.dmp

Filesize
8KB

Download