1f12dd2dc5598f80324a10c0edf5cf6c0644494799376b7d9dc2f6646baf1e27

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
13-07-2024 20:09

Target

432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe
Size

14KB
MD5

432aa14feaa00f979de5b9a71c4bd753
SHA1

98334283b1cd2128dca069239a1ad65212a334e6
SHA256

1f12dd2dc5598f80324a10c0edf5cf6c0644494799376b7d9dc2f6646baf1e27
SHA512

8ac7cc7af016941d920c86f735f3fa95fd805ba66258a22f359e4fe821c58e304928787b08f09b42c3a1b4fa28c173ba92c925a8a68fef60a29b22d9ee062b94
SSDEEP

384:wN8lOPg12ZMX/dvTM7aUYSnZwWEwnQJfzVElqvp:wRaXX/HuZ7BQBzKlqR

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2056 set thread context of 2788	2056	432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe	30

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2056 wrote to memory of 2788	2056	432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe	30
PID 2056 wrote to memory of 2788	2056	432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe	30
PID 2056 wrote to memory of 2788	2056	432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe	30
PID 2056 wrote to memory of 2788	2056	432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe	30
PID 2056 wrote to memory of 2788	2056	432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe	30
PID 2056 wrote to memory of 2788	2056	432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe	30
PID 2056 wrote to memory of 2788	2056	432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2056
- C:\Users\Admin\AppData\Local\Temp\432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\432aa14feaa00f979de5b9a71c4bd753_JaffaCakes118.exe
  2⤵
  PID:2788

memory/2788-0-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2788-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2788-9-0x0000000000400000-0x0000000000402800-memory.dmp

Filesize
10KB

Download
memory/2788-7-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2788-6-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2788-2-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download