38d2e01bd156eb0c2233336a625569ac94981702d0ab436e386b6c6638489074

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 18:42

Target

42e2ae5b44ab4a2c10bc079a9805841d_JaffaCakes118.exe
Size

55KB
MD5

42e2ae5b44ab4a2c10bc079a9805841d
SHA1

7c288b5178354b5483197fd779c368bda8af0137
SHA256

38d2e01bd156eb0c2233336a625569ac94981702d0ab436e386b6c6638489074
SHA512

eef2a0138aca349d85a7dfeee470ae22eab93aae5006465fcd9021e822ec5f170a8231d190c505df3290a19cf7dc3cfee2094f70225d181379d5632f9594a49e
SSDEEP

768:tevFI1m0on6HGavZU9QffoaFNnvoNQpMGZCJ:ItV6HGavBgatCJ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2096	42e2ae5b44ab4a2c10bc079a9805841d_JaffaCakes118.exe
2096	42e2ae5b44ab4a2c10bc079a9805841d_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2096 wrote to memory of 1252	2096	42e2ae5b44ab4a2c10bc079a9805841d_JaffaCakes118.exe	21
PID 2096 wrote to memory of 1252	2096	42e2ae5b44ab4a2c10bc079a9805841d_JaffaCakes118.exe	21
PID 2096 wrote to memory of 1252	2096	42e2ae5b44ab4a2c10bc079a9805841d_JaffaCakes118.exe	21
PID 2096 wrote to memory of 1252	2096	42e2ae5b44ab4a2c10bc079a9805841d_JaffaCakes118.exe	21

memory/1252-1-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1252-5-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2096-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2096-4-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/2096-14-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download