2804d62022825c219710f58b1019176813c20a491b37808c6b93a97c12586e7e

Analysis

max time kernel
93s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15-07-2024 02:52

Target

47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe
Size

240KB
MD5

47e6e1919643de4e8e4facce695d3494
SHA1

fc489767e3d11ad0f955f920dc4523bbb0b08f2f
SHA256

2804d62022825c219710f58b1019176813c20a491b37808c6b93a97c12586e7e
SHA512

28a2123ee7ca570760f466bf8bd0852f5f5d58979467768583d424f8725d50c2c855ce08b240b13a741325d577e65ae932513e4e02b90ce60acc2413590b176a
SSDEEP

3072:SpKDbOozkX28vBLjGYktcmAziY7Kga3N4G4tMTJdMtyaSC0:KsOowGCODumAztUCGeMT/MJSC0

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2824 set thread context of 3516	2824	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	86

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2824	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2824 wrote to memory of 3516	2824	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	86
PID 2824 wrote to memory of 3516	2824	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	86
PID 2824 wrote to memory of 3516	2824	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	86
PID 2824 wrote to memory of 3516	2824	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	86
PID 2824 wrote to memory of 3516	2824	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	86
PID 2824 wrote to memory of 3516	2824	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	86
PID 2824 wrote to memory of 3516	2824	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	86
PID 2824 wrote to memory of 3516	2824	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	86
PID 2824 wrote to memory of 3516	2824	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	86
PID 3516 wrote to memory of 3408	3516	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	56
PID 3516 wrote to memory of 3408	3516	47e6e1919643de4e8e4facce695d3494_JaffaCakes118.exe	56

memory/3516-2-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3516-3-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3516-4-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3516-7-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download