48310f23084522cfb4b9aaad78d00f48b92bd8491455b8ef316fc3d1c7848395

Analysis

max time kernel
93s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
14-07-2024 16:28

Target

469d5f777b0e2dd1ac9c4cea3b54a93a_JaffaCakes118.dll
Size

5KB
MD5

469d5f777b0e2dd1ac9c4cea3b54a93a
SHA1

11763996b39e1e35fc2d3fb728b260f509b3ad84
SHA256

48310f23084522cfb4b9aaad78d00f48b92bd8491455b8ef316fc3d1c7848395
SHA512

4a61c5ff5140311e48769349ab38d7db1056b2f88ba3e34fab9b1bb203f5a683a97b490701a3a6bf8a8d57454d3ad399e28b4de57e708116417548c2a1942666
SSDEEP

96:RpDi6iiGIaXowjJj8KE7milmQ1k6GsvvV0DB5UVMecB1isLYrCUCe66BH:Rp+a1eSK+VSDcmF1L0Dj6I

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4704 wrote to memory of 3752	4704	rundll32.exe	83
PID 4704 wrote to memory of 3752	4704	rundll32.exe	83
PID 4704 wrote to memory of 3752	4704	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\469d5f777b0e2dd1ac9c4cea3b54a93a_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4704
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\469d5f777b0e2dd1ac9c4cea3b54a93a_JaffaCakes118.dll,#1
  2⤵
  PID:3752