0452c175adb77ee2983e31577a13e76cedc126d4326cfe946b5a5eeee080aa4e

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 04:06

Target

4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe
Size

79KB
MD5

4825f3d55775f94c43322c1ef3043d40
SHA1

60f9d143135ef212624567d787a802e6afbf8633
SHA256

0452c175adb77ee2983e31577a13e76cedc126d4326cfe946b5a5eeee080aa4e
SHA512

2a763b291b54d729f21fa57f3421c8630fb27cb61a9f19cb9adf72920616d5b18e4c15e88ee38d7d3c06660121c32c13388a6e9b63b63920b9f606c7ddc4747d
SSDEEP

1536:Y8BUAHWbnZPJKqO/cRApm1kTYXEb8uyPG29zHW7u+W2:vtWbZPJK5/+ApLs0bOPG2VHW7ul2

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2312 set thread context of 2716	2312	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe	30

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2716	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe
2716	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2312 wrote to memory of 2716	2312	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe	30
PID 2312 wrote to memory of 2716	2312	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe	30
PID 2312 wrote to memory of 2716	2312	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe	30
PID 2312 wrote to memory of 2716	2312	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe	30
PID 2312 wrote to memory of 2716	2312	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe	30
PID 2312 wrote to memory of 2716	2312	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe	30
PID 2716 wrote to memory of 1244	2716	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe	21
PID 2716 wrote to memory of 1244	2716	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe	21
PID 2716 wrote to memory of 1244	2716	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe	21
PID 2716 wrote to memory of 1244	2716	4825f3d55775f94c43322c1ef3043d40_JaffaCakes118.exe	21

memory/1244-3-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1244-8-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2716-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2716-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2716-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download