2e8ffd32490f2048282eec98d20959c89a910f13252277b2475a26eb643bda4a

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 20:44

Target

4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe
Size

79KB
MD5

4b539ca4675a53c92602de1f23601870
SHA1

74d8e8da8e44d1ce363e0c2f7813f4628963c6cb
SHA256

2e8ffd32490f2048282eec98d20959c89a910f13252277b2475a26eb643bda4a
SHA512

a4b8aa0d78c2ccc4a579770df333c80fcd5c3cc1e03f21ceafcbbb04015bb604c000eef3a81d00ce099ba8b980935bfd5888d6afd409d00a4143c11cf041091b
SSDEEP

1536:D85tt3boXJ0qO/cRApm1kTYXEb8uyPG29zHW7u+yc:YF3b6J05/+ApLs0bOPG2VHW7u1c

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2672 set thread context of 2708	2672	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe	30

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2708	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe
2708	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2672 wrote to memory of 2708	2672	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe	30
PID 2672 wrote to memory of 2708	2672	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe	30
PID 2672 wrote to memory of 2708	2672	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe	30
PID 2672 wrote to memory of 2708	2672	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe	30
PID 2672 wrote to memory of 2708	2672	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe	30
PID 2672 wrote to memory of 2708	2672	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe	30
PID 2708 wrote to memory of 1164	2708	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe	21
PID 2708 wrote to memory of 1164	2708	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe	21
PID 2708 wrote to memory of 1164	2708	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe	21
PID 2708 wrote to memory of 1164	2708	4b539ca4675a53c92602de1f23601870_JaffaCakes118.exe	21

memory/1164-3-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1164-7-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2708-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2708-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2708-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download