e4171e87bb24f5bd8d79c0bb68a5445e3462a71f48c193c692efe66e4d2a081d

Analysis

max time kernel
149s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14-07-2024 14:03

Target

46224fb65363e633a0973b2d75a85334_JaffaCakes118.exe
Size

84KB
MD5

46224fb65363e633a0973b2d75a85334
SHA1

c753f3e9fc7c51f1d052ed364446dca8f2b467b9
SHA256

e4171e87bb24f5bd8d79c0bb68a5445e3462a71f48c193c692efe66e4d2a081d
SHA512

845c6294017588102bb37c0a205da5cc6cafa9d1c7535b3e4714150abc160e2cbc8acf81ab774c23ecb386ca5350e02d02389c4a14ffabce146517e9378c5c8e
SSDEEP

1536:mb9auki8nOOPxMDV4MhVgRbhSRsiJJMevd:mbozbhaVhShtiFvd

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2924	46224fb65363e633a0973b2d75a85334_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2924 wrote to memory of 2268	2924	46224fb65363e633a0973b2d75a85334_JaffaCakes118.exe	31
PID 2924 wrote to memory of 2268	2924	46224fb65363e633a0973b2d75a85334_JaffaCakes118.exe	31
PID 2924 wrote to memory of 2268	2924	46224fb65363e633a0973b2d75a85334_JaffaCakes118.exe	31
PID 2924 wrote to memory of 2268	2924	46224fb65363e633a0973b2d75a85334_JaffaCakes118.exe	31
PID 2924 wrote to memory of 2268	2924	46224fb65363e633a0973b2d75a85334_JaffaCakes118.exe	31
PID 2924 wrote to memory of 2268	2924	46224fb65363e633a0973b2d75a85334_JaffaCakes118.exe	31
PID 2924 wrote to memory of 2268	2924	46224fb65363e633a0973b2d75a85334_JaffaCakes118.exe	31

memory/2268-7-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2268-10-0x0000000000E02000-0x0000000000E03000-memory.dmp

Filesize
4KB

Download
memory/2268-11-0x0000000000E00000-0x0000000000E08000-memory.dmp

Filesize
32KB

Download
memory/2268-6-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2924-0-0x0000000000415000-0x0000000000417000-memory.dmp

Filesize
8KB

Download
memory/2924-3-0x0000000000220000-0x0000000000232000-memory.dmp

Filesize
72KB

Download
memory/2924-2-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2924-1-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download
memory/2924-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2924-9-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download