041205d13788c8ca7a0b3fa414b38ef149e64900983bbcf894d8b3ef59e78972

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 19:08

Target

42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe
Size

79KB
MD5

42f88783b37f2fdf27588c77474d829f
SHA1

50aa2c2c8623919abf187fbf34571f77fb012d74
SHA256

041205d13788c8ca7a0b3fa414b38ef149e64900983bbcf894d8b3ef59e78972
SHA512

3d196369edb4e2e446419c80ce43725891748805b62927fe79ced091d2e659caaa7dcbb4be6f88bed5dbb292216ef98b78abe2a04a6f364630ca3a78904a5014
SSDEEP

1536:Y85tF2bdXJ0qO/cRApm1kTYXEb8uyPG29zHW7u+y1s:vt2bZJ05/+ApLs0bOPG2VHW7u1y

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2676 set thread context of 2752	2676	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe	30

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2752	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe
2752	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2676 wrote to memory of 2752	2676	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe	30
PID 2676 wrote to memory of 2752	2676	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe	30
PID 2676 wrote to memory of 2752	2676	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe	30
PID 2676 wrote to memory of 2752	2676	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe	30
PID 2676 wrote to memory of 2752	2676	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe	30
PID 2676 wrote to memory of 2752	2676	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe	30
PID 2752 wrote to memory of 1192	2752	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe	21
PID 2752 wrote to memory of 1192	2752	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe	21
PID 2752 wrote to memory of 1192	2752	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe	21
PID 2752 wrote to memory of 1192	2752	42f88783b37f2fdf27588c77474d829f_JaffaCakes118.exe	21

memory/1192-4-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1192-8-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2752-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2752-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2752-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2752-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download