174b959f94b86f5c7c1f6235b810d2b96ce27e12139c73b7824f402b7b053ebd

Analysis

max time kernel
141s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2024, 00:14

Target

476493e2e242231ca1bf7c6fa47b5398_JaffaCakes118.exe
Size

7.8MB
MD5

476493e2e242231ca1bf7c6fa47b5398
SHA1

19f937220782f511642e4d45d5035b3819615b60
SHA256

174b959f94b86f5c7c1f6235b810d2b96ce27e12139c73b7824f402b7b053ebd
SHA512

c3edb76434c5aac09822d2b6ccc763bd1d9a246330e27118c3a7e1802868a9f3dbd0db676ae313a9075fa107727f67f1b1758c1c5eb1c0bc5ea78b731ce2f330
SSDEEP

196608:3S0ywMFH8YDN1Id3szfjbmFePZ90TQwkAIFKnlP4vNK4/WIm:BywMFHTod3qbpw0quodIKay

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1412	Stp87DD_TMP.EXE

NSIS installer 1 IoCs

installer

resource	yara_rule
behavioral2/files/0x0008000000023436-0.dat	nsis_installer_1

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1612 wrote to memory of 1412	1612	476493e2e242231ca1bf7c6fa47b5398_JaffaCakes118.exe	85
PID 1612 wrote to memory of 1412	1612	476493e2e242231ca1bf7c6fa47b5398_JaffaCakes118.exe	85
PID 1612 wrote to memory of 1412	1612	476493e2e242231ca1bf7c6fa47b5398_JaffaCakes118.exe	85

C:\Users\Admin\AppData\Local\Temp\476493e2e242231ca1bf7c6fa47b5398_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\476493e2e242231ca1bf7c6fa47b5398_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1612
- C:\Users\Admin\AppData\Local\Temp\Stp87DD_TMP.EXE
  "C:\Users\Admin\AppData\Local\Temp\Stp87DD_TMP.EXE"
  2⤵
  - Executes dropped EXE
  PID:1412

C:\Users\Admin\AppData\Local\Temp\Stp87DD_TMP.EXE

Filesize
8.0MB

MD5
1ac30211bb0e2b7f8ab8db31495ffa3b

SHA1
ddb27c23177b1b7cf6a2288a37fc07e07b3e0174

SHA256
633fc7c21b04166eebcfe013b815bfcdcd6e222704bd16ec2ef0af1f08a1307b

SHA512
8c4302b0ac5533e4c5609d1a2827c826622b42fa7df121a4253e13c11f1acfef86ca4f32e227f8bd09b769515d61e556e775f58fd9f9a1e420af9dd7b9117615

Download Submit