58f1da6f4d5b2fed0c31209c9c0d1f54175784765bfdf2ae84b2edd554988a62

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 18:23

Target

46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe
Size

103KB
MD5

46fc2158a04e3293f1eaeda173c12fcc
SHA1

7e5ddaca94c900c68292fecda5db6167d4e0c81f
SHA256

58f1da6f4d5b2fed0c31209c9c0d1f54175784765bfdf2ae84b2edd554988a62
SHA512

0df9b644112f52b884821a2d80034c685f86da340519cad13b6eeb55667b4ca2aab918505ceb1161662a15424f0e5471307c101fdc1e9d345ee1392fa9ef795a
SSDEEP

1536:wf2aGNw2z7L4bZ2pOaK1MSfHvrcWPHbOU++r5fkrLiwn/Ht27m9kKwVPXhe:UoNw2/sbZ21izDlqUTerLf/HcmSFPXhe

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2272 set thread context of 2292	2272	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	30

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2292	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe
2292	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2272 wrote to memory of 2292	2272	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	30
PID 2272 wrote to memory of 2292	2272	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	30
PID 2272 wrote to memory of 2292	2272	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	30
PID 2272 wrote to memory of 2292	2272	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	30
PID 2272 wrote to memory of 2292	2272	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	30
PID 2272 wrote to memory of 2292	2272	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	30
PID 2292 wrote to memory of 1200	2292	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	21
PID 2292 wrote to memory of 1200	2292	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	21
PID 2292 wrote to memory of 1200	2292	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	21
PID 2292 wrote to memory of 1200	2292	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	21
PID 2292 wrote to memory of 1200	2292	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	21
PID 2292 wrote to memory of 1200	2292	46fc2158a04e3293f1eaeda173c12fcc_JaffaCakes118.exe	21

memory/1200-3-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1200-10-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2292-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2292-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download