8534b1e1c2b1f407f566cfc04233b7f3c9fe24427d083b0b9b60ddd25152023a

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 02:34

Target

3fd992ee53205ed69d1421489155d925_JaffaCakes118.exe
Size

26KB
MD5

3fd992ee53205ed69d1421489155d925
SHA1

c0a3289a92a9229055438967055abaa102877a3a
SHA256

8534b1e1c2b1f407f566cfc04233b7f3c9fe24427d083b0b9b60ddd25152023a
SHA512

bd82333a3196c4cd69d2a87be5362b6744dca104edbf237949bc863caf65a567c9e27bd9f5781751d4af999d157c0d8f5f0e6efb6c630da2209fc3027db98160
SSDEEP

384:0FyH905eSH8E1xvqXCO25jwHwAax40xxNzrR78cT1cAd9upYL0pJ:0FxRO25Hx4cNPI

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 432 wrote to memory of 1056	432	3fd992ee53205ed69d1421489155d925_JaffaCakes118.exe	83
PID 432 wrote to memory of 1056	432	3fd992ee53205ed69d1421489155d925_JaffaCakes118.exe	83

C:\Users\Admin\AppData\Local\Temp\3fd992ee53205ed69d1421489155d925_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3fd992ee53205ed69d1421489155d925_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:432
- C:\Program Files\Internet Explorer\iexplore.exe
  "C:\Program Files\Internet Explorer\iexplore.exe"
  2⤵
  PID:1056

memory/432-0-0x0000000000010000-0x000000000001D000-memory.dmp

Filesize
52KB

Download