7d2be98c91460be99afcf7df3895c4979b829552b8e952b3a871f332c3edde1c

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 11:01

Target

416556746276def4a19f28aa437c97e6_JaffaCakes118.exe
Size

126KB
MD5

416556746276def4a19f28aa437c97e6
SHA1

226c4708487dbd80f611cd1046267d57a87be7c7
SHA256

7d2be98c91460be99afcf7df3895c4979b829552b8e952b3a871f332c3edde1c
SHA512

faf6385d35b5c5995ac57cc438c148e4e2a69601328e251be168cc89d632c13969cc9f062fc20e6117c9b68fb17613d3702788f16bcd4d5b4a39f23dac291c2d
SSDEEP

3072:Fc9JvcZQZawK/7Xo47tkQm3/ethkI7HhiHtkvULbQwzHO:Fc9J0ZJtkd2t+Ai2vULsEHO

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2288 wrote to memory of 2696	2288	416556746276def4a19f28aa437c97e6_JaffaCakes118.exe	30
PID 2288 wrote to memory of 2696	2288	416556746276def4a19f28aa437c97e6_JaffaCakes118.exe	30
PID 2288 wrote to memory of 2696	2288	416556746276def4a19f28aa437c97e6_JaffaCakes118.exe	30
PID 2288 wrote to memory of 2696	2288	416556746276def4a19f28aa437c97e6_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\416556746276def4a19f28aa437c97e6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\416556746276def4a19f28aa437c97e6_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2288
- C:\Users\Admin\AppData\Local\Temp\416556746276def4a19f28aa437c97e6_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\416556746276def4a19f28aa437c97e6_JaffaCakes118.exe"
  2⤵
  PID:2696

memory/2288-0-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download