d6cdebe7eac34885e6c2111ada0e87a5e00d32bf9a02aaf84612b78336cfd5ea

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 16:22

Target

42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe
Size

79KB
MD5

42711243cc97a460c0491989cc48d13e
SHA1

915179d2fc947395b57d337a368cbf465626a80e
SHA256

d6cdebe7eac34885e6c2111ada0e87a5e00d32bf9a02aaf84612b78336cfd5ea
SHA512

9dabd147ff5735e806707b39ee221d5fec2b07ca8e5f9c18dad412989f796fcd924a1138aec4027ab56425b4f99ab3ba743fda7ee5daffb934b57850d0b5459a
SSDEEP

1536:CSI+/Jalymhy5wErrYGcGoEhUWyZJSTFJ4whdvSvvMvv1zrnVhf6:m+MyOErEGxhoZ08wLvbzrW

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4188 set thread context of 736	4188	42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe	83

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 4188 wrote to memory of 736	4188	42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe	83
PID 4188 wrote to memory of 736	4188	42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe	83
PID 4188 wrote to memory of 736	4188	42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe	83
PID 4188 wrote to memory of 736	4188	42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe	83
PID 4188 wrote to memory of 736	4188	42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe	83
PID 4188 wrote to memory of 736	4188	42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe	83
PID 736 wrote to memory of 3460	736	42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe	56
PID 736 wrote to memory of 3460	736	42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe	56
PID 736 wrote to memory of 3460	736	42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe	56
PID 736 wrote to memory of 3460	736	42711243cc97a460c0491989cc48d13e_JaffaCakes118.exe	56

memory/736-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/736-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/736-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/736-4-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/3460-6-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3460-7-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/4188-3-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download