3b6dff1e6739c64ab7407ecb050708671b09e0d2f7ea3efe091f48a818effa50

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 01:34

Target

3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe
Size

79KB
MD5

3fad733f792ebb5cf90cb4a7cbe301ac
SHA1

4c1a314b6b425928792c9039baa8afaba3f8c5ac
SHA256

3b6dff1e6739c64ab7407ecb050708671b09e0d2f7ea3efe091f48a818effa50
SHA512

d8e0d78a7f0e645f9d1e5bf1543e36840cda02bba32d379a5755dfdce7aa5e8d8bdc4d9f767780332e29a8039f77090536fd602545bfb4db95c6356c2aadedb3
SSDEEP

1536:Y85tC2bdXJ0qO/cRApm1kTYXEb8uyPG29zHW7u+y1s:va2bZJ05/+ApLs0bOPG2VHW7u1y

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2436 set thread context of 2332	2436	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe	30

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2332	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe
2332	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2436 wrote to memory of 2332	2436	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe	30
PID 2436 wrote to memory of 2332	2436	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe	30
PID 2436 wrote to memory of 2332	2436	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe	30
PID 2436 wrote to memory of 2332	2436	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe	30
PID 2436 wrote to memory of 2332	2436	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe	30
PID 2436 wrote to memory of 2332	2436	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe	30
PID 2332 wrote to memory of 1300	2332	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe	21
PID 2332 wrote to memory of 1300	2332	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe	21
PID 2332 wrote to memory of 1300	2332	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe	21
PID 2332 wrote to memory of 1300	2332	3fad733f792ebb5cf90cb4a7cbe301ac_JaffaCakes118.exe	21

memory/1300-4-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1300-8-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2332-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2332-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2332-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2332-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download