a60d45757d166e484d0e094fd01afcd2d10ac0283e5c28c2d27122339c6a815c

Analysis

max time kernel
149s
max time network
128s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14-07-2024 15:43

Target

46766480f9afcd94015be5cf7e14f828_JaffaCakes118.exe
Size

169KB
MD5

46766480f9afcd94015be5cf7e14f828
SHA1

68785e4f3009b4b91764001cd33830b5b4902254
SHA256

a60d45757d166e484d0e094fd01afcd2d10ac0283e5c28c2d27122339c6a815c
SHA512

37eefbd3f667b8acd300dff284cda025179435cde375b0b27260c0b09e2504420e7fa80862ff3b8de4cf19a9ed5ef23895562dbc0a642b99f89e0c3e2f04d706
SSDEEP

3072:lqWltLnJsJV7a51VSuEfkX5cN1jLq/Urr6ze0YtO6:EWltj4MDghkpo5+/Urr6zk

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2240	46766480f9afcd94015be5cf7e14f828_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 2684	2240	46766480f9afcd94015be5cf7e14f828_JaffaCakes118.exe	31
PID 2240 wrote to memory of 2684	2240	46766480f9afcd94015be5cf7e14f828_JaffaCakes118.exe	31
PID 2240 wrote to memory of 2684	2240	46766480f9afcd94015be5cf7e14f828_JaffaCakes118.exe	31
PID 2240 wrote to memory of 2684	2240	46766480f9afcd94015be5cf7e14f828_JaffaCakes118.exe	31
PID 2240 wrote to memory of 2684	2240	46766480f9afcd94015be5cf7e14f828_JaffaCakes118.exe	31
PID 2240 wrote to memory of 2684	2240	46766480f9afcd94015be5cf7e14f828_JaffaCakes118.exe	31
PID 2240 wrote to memory of 2684	2240	46766480f9afcd94015be5cf7e14f828_JaffaCakes118.exe	31

memory/2240-3-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2240-2-0x00000000002A0000-0x00000000002A1000-memory.dmp

Filesize
4KB

Download
memory/2684-0-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2684-4-0x00000000002E2000-0x00000000002E3000-memory.dmp

Filesize
4KB

Download
memory/2684-5-0x00000000002E0000-0x00000000002E8000-memory.dmp

Filesize
32KB

Download
memory/2684-1-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download