Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
14/07/2024, 07:33
General
-
Target
44e25dc983967d45ad40fdfdcbd11bb1_JaffaCakes118.dll
-
Size
48KB
-
MD5
44e25dc983967d45ad40fdfdcbd11bb1
-
SHA1
9d7b86cf27608b3c1f9ea735e75e7900adc3304a
-
SHA256
14cd872fba881ee0b0e675d92bb91c734f65f44684343e0ad9e48a3a6d7bdcc3
-
SHA512
88b093986baead43ce909a915bdb50d6c80b3ec7d01ad0837b2babe8422939bdd5688fb9ab27a5a783a384b94d51de4208bff3762fb2f811970356f853d1bc66
-
SSDEEP
768:E2Rb8cbfnuMzE4/orK7sFneSAnbN9soiGgq0YxJ:FRIaz//oSUAnDilq0YH
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\44e25dc983967d45ad40fdfdcbd11bb1_JaffaCakes118.dll,#12⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\44e25dc983967d45ad40fdfdcbd11bb1_JaffaCakes118.dll,#13⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
-