cd0146c59e89e16521dc5c8e68518cedf3bd4467cbcc14aad6de6e9a62470a8b

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 03:37

Target

480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe
Size

411KB
MD5

480ccc5d0f1f199eae63ed5f181a9aee
SHA1

5665a2bcf9e2e22734f053be9a03854052707d56
SHA256

cd0146c59e89e16521dc5c8e68518cedf3bd4467cbcc14aad6de6e9a62470a8b
SHA512

af35edf433cf8ba2c9c72281d96163dc15f72106a915d4e597ed36670e5b2d1321d63d71eee64c8c91cc6d5494bae6c2c542c4d90e23f19ad7f2159dd34d8015
SSDEEP

3072:TKloQSrkKgRENEI5apGTwQqVMTW0hiJDehoFlt3ywu5t4NBu7Jl:GtFI

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2072 set thread context of 2328	2072	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	30

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2328	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe
2328	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2072	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2072 wrote to memory of 2328	2072	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	30
PID 2072 wrote to memory of 2328	2072	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	30
PID 2072 wrote to memory of 2328	2072	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	30
PID 2072 wrote to memory of 2328	2072	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	30
PID 2072 wrote to memory of 2328	2072	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	30
PID 2072 wrote to memory of 2328	2072	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	30
PID 2072 wrote to memory of 2328	2072	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	30
PID 2072 wrote to memory of 2328	2072	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	30
PID 2328 wrote to memory of 1184	2328	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	21
PID 2328 wrote to memory of 1184	2328	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	21
PID 2328 wrote to memory of 1184	2328	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	21
PID 2328 wrote to memory of 1184	2328	480ccc5d0f1f199eae63ed5f181a9aee_JaffaCakes118.exe	21

memory/1184-11-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1184-15-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2072-0-0x0000000000400000-0x0000000000464000-memory.dmp

Filesize
400KB

Download
memory/2072-3-0x00000000025E0000-0x0000000002644000-memory.dmp

Filesize
400KB

Download
memory/2072-8-0x0000000000400000-0x0000000000464000-memory.dmp

Filesize
400KB

Download
memory/2328-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2328-5-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/2328-9-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2328-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2328-14-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download