ab8410e12dd650817514b976abed360044a2afd09ca94a254b5b46cffebb7d4b

Analysis

max time kernel
94s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 02:59

Target

3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe
Size

686KB
MD5

3fece8b93e574c9aed839e91bc7139fd
SHA1

43b2f1322d148de7289328559f96e3e6d9e5b9e8
SHA256

ab8410e12dd650817514b976abed360044a2afd09ca94a254b5b46cffebb7d4b
SHA512

22375acc4c89bf66bd3b4269a17da0a881cb61ae2db790aed03fa7b2dee4747ce9adb7d63caa86e15dea9e0b90a3d9b9998dd06d3bfff8165e49afb26ec4166a
SSDEEP

12288:1ITW0SsSYpDlta31MUhXjNM3PQ7TxIcntupZB78FsWGIph8d:1ITW0Ss3D7aucXjAPQ7l30pb70Gd

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4624 set thread context of 3028	4624	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	86

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3028	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe
3028	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe
3028	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe
3028	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4624	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 4624 wrote to memory of 3028	4624	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	86
PID 4624 wrote to memory of 3028	4624	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	86
PID 4624 wrote to memory of 3028	4624	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	86
PID 4624 wrote to memory of 3028	4624	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	86
PID 4624 wrote to memory of 3028	4624	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	86
PID 4624 wrote to memory of 3028	4624	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	86
PID 4624 wrote to memory of 3028	4624	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	86
PID 3028 wrote to memory of 3288	3028	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	55
PID 3028 wrote to memory of 3288	3028	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	55
PID 3028 wrote to memory of 3288	3028	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	55
PID 3028 wrote to memory of 3288	3028	3fece8b93e574c9aed839e91bc7139fd_JaffaCakes118.exe	55

memory/3028-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3028-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3028-11-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3028-12-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3288-13-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3288-14-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/4624-0-0x0000000000400000-0x00000000005B9000-memory.dmp

Filesize
1.7MB

Download
memory/4624-1-0x0000000000548000-0x0000000000550000-memory.dmp

Filesize
32KB

Download
memory/4624-2-0x0000000000400000-0x00000000005B9000-memory.dmp

Filesize
1.7MB

Download
memory/4624-10-0x0000000000400000-0x00000000005B9000-memory.dmp

Filesize
1.7MB

Download
memory/4624-9-0x0000000000548000-0x0000000000550000-memory.dmp

Filesize
32KB

Download