b718b4841c69f6fcfed4896d136d4f3aee7c891cef20c35869a7e2ee6af5b216

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 04:21

Target

444977be73859dffcbc732b264d01f54_JaffaCakes118.exe
Size

1.4MB
MD5

444977be73859dffcbc732b264d01f54
SHA1

6988ef5c603716d010a893455ac617b162ed089f
SHA256

b718b4841c69f6fcfed4896d136d4f3aee7c891cef20c35869a7e2ee6af5b216
SHA512

bdb6dac99631352600423452cf8891637a7d5ea4e8cdea16aa1ad9c20c68ba68c90c8bf78bcacfb230e6f1ef56bb88d4fdca278035e1be137ba24dd73d49b9f3
SSDEEP

24576:YJ6e/SYS1uhHuOxH2zPRxPWp+y+ZKb5SbppXc230rDt2nkTxP3VL562rlB1HwAr:lTut2zrP/y+UNSVpM2k3t2WxfOclsAr

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2688	444977be73859dffcbc732b264d01f54_JaffaCakes118.exe
2688	444977be73859dffcbc732b264d01f54_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2688 wrote to memory of 1240	2688	444977be73859dffcbc732b264d01f54_JaffaCakes118.exe	21
PID 2688 wrote to memory of 1240	2688	444977be73859dffcbc732b264d01f54_JaffaCakes118.exe	21
PID 2688 wrote to memory of 1240	2688	444977be73859dffcbc732b264d01f54_JaffaCakes118.exe	21
PID 2688 wrote to memory of 1240	2688	444977be73859dffcbc732b264d01f54_JaffaCakes118.exe	21
PID 2688 wrote to memory of 1240	2688	444977be73859dffcbc732b264d01f54_JaffaCakes118.exe	21
PID 2688 wrote to memory of 1240	2688	444977be73859dffcbc732b264d01f54_JaffaCakes118.exe	21

memory/1240-5-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1240-12-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2688-1-0x0000000000570000-0x000000000069F000-memory.dmp

Filesize
1.2MB

Download
memory/2688-0-0x0000000000260000-0x0000000000261000-memory.dmp

Filesize
4KB

Download
memory/2688-4-0x0000000000400000-0x0000000000570000-memory.dmp

Filesize
1.4MB

Download
memory/2688-3-0x0000000000401000-0x0000000000408000-memory.dmp

Filesize
28KB

Download
memory/2688-2-0x0000000004080000-0x0000000004082000-memory.dmp

Filesize
8KB

Download
memory/2688-8-0x0000000000400000-0x0000000000570000-memory.dmp

Filesize
1.4MB

Download
memory/2688-24-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2688-27-0x0000000000401000-0x0000000000408000-memory.dmp

Filesize
28KB

Download