a1e06e353e1bbaa3836ac2c0417649beceb8ac695da0bce0faad66bae4482c71

Analysis

max time kernel
149s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 01:26

Target

47a4cb10447809e6fcfd1145fc85beb3_JaffaCakes118.exe
Size

83KB
MD5

47a4cb10447809e6fcfd1145fc85beb3
SHA1

5dd9f79eab891da1d2b3c988685f7894977ecb59
SHA256

a1e06e353e1bbaa3836ac2c0417649beceb8ac695da0bce0faad66bae4482c71
SHA512

89b6ec65778b246ce804ba4bc8265d62b72e4bff4171f5f77b57efac8c0c1051f620fcf6bf3199dc2564efdc8e07d0b5cd5e31248b69114c9decd64bbcc72b57
SSDEEP

1536:+eUoxkwUpGQXkzxskj8cOAjbuphExSCHn8Rn5MMUXf:+eUox7skLAcOYd7n8R5MM

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2080	47a4cb10447809e6fcfd1145fc85beb3_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2080 wrote to memory of 2732	2080	47a4cb10447809e6fcfd1145fc85beb3_JaffaCakes118.exe	30
PID 2080 wrote to memory of 2732	2080	47a4cb10447809e6fcfd1145fc85beb3_JaffaCakes118.exe	30
PID 2080 wrote to memory of 2732	2080	47a4cb10447809e6fcfd1145fc85beb3_JaffaCakes118.exe	30
PID 2080 wrote to memory of 2732	2080	47a4cb10447809e6fcfd1145fc85beb3_JaffaCakes118.exe	30
PID 2080 wrote to memory of 2732	2080	47a4cb10447809e6fcfd1145fc85beb3_JaffaCakes118.exe	30
PID 2080 wrote to memory of 2732	2080	47a4cb10447809e6fcfd1145fc85beb3_JaffaCakes118.exe	30
PID 2080 wrote to memory of 2732	2080	47a4cb10447809e6fcfd1145fc85beb3_JaffaCakes118.exe	30

memory/2080-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2080-6-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2732-4-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2732-3-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2732-7-0x0000000000712000-0x0000000000713000-memory.dmp

Filesize
4KB

Download
memory/2732-8-0x0000000000710000-0x0000000000718000-memory.dmp

Filesize
32KB

Download