d98dda46300c142bdb16c4907efc6af434aa756ee938b5c7c67657ed649a2c0b

Analysis

max time kernel
136s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15-07-2024 19:50

Target

4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe
Size

248KB
MD5

4b25b52563cdc1d4d87bd57d6a5bf3b7
SHA1

532c0e1057862b3b71f4f690f857abed10e4705d
SHA256

d98dda46300c142bdb16c4907efc6af434aa756ee938b5c7c67657ed649a2c0b
SHA512

041403cead3a9187e0e0a8c8b49a2c5c9a1c47c327bc3702f04d9d340f6c1974f71fcd75c5764cb958e4cbfe6c52f70654998973096cd7e1de259eded1014fb6
SSDEEP

3072:3MCWCfW5qZRW/lTgUQqj5Bl9rOY3GtrFXPUgDTVotdM:8PYqgUQqdHpOY328g/8M

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2900	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe
2596	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe
300	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe
2084	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 2900 wrote to memory of 2596	2900	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	32
PID 2900 wrote to memory of 2596	2900	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	32
PID 2900 wrote to memory of 2596	2900	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	32
PID 2900 wrote to memory of 2596	2900	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	32
PID 2596 wrote to memory of 300	2596	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	33
PID 2596 wrote to memory of 300	2596	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	33
PID 2596 wrote to memory of 300	2596	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	33
PID 2596 wrote to memory of 300	2596	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	33
PID 300 wrote to memory of 2084	300	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	34
PID 300 wrote to memory of 2084	300	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	34
PID 300 wrote to memory of 2084	300	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	34
PID 300 wrote to memory of 2084	300	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	34
PID 2084 wrote to memory of 1200	2084	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	35
PID 2084 wrote to memory of 1200	2084	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	35
PID 2084 wrote to memory of 1200	2084	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	35
PID 2084 wrote to memory of 1200	2084	4b25b52563cdc1d4d87bd57d6a5bf3b7_JaffaCakes118.exe	35