7611f09f6fbdeee5bc59708d54557f3b963da77f40e427ef45d881bbd1795f62

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
16/07/2024, 02:53

Target

4c827c1e96610a872e929cae7fd2067d_JaffaCakes118.exe
Size

24KB
MD5

4c827c1e96610a872e929cae7fd2067d
SHA1

ae1e73df8fb15640ad21cafae05e5486a5d26440
SHA256

7611f09f6fbdeee5bc59708d54557f3b963da77f40e427ef45d881bbd1795f62
SHA512

65d106848e66d1473b8ebc93d2ff90b5ef303690ad6fd1524399cfaa70d433757e4689ae54fbea164ee08cfd9de6002a35609443c948520ad754d3839caab0d2
SSDEEP

768:/LD1dLG16xTJ49999999u+1wjcBPJqLdkvw3+EWLG16xTJ49999999uv:/LDbLG16xF49999999xdrEWLG16xF490

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2656	4c827c1e96610a872e929cae7fd2067d_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2656 wrote to memory of 2724	2656	4c827c1e96610a872e929cae7fd2067d_JaffaCakes118.exe	86
PID 2656 wrote to memory of 2724	2656	4c827c1e96610a872e929cae7fd2067d_JaffaCakes118.exe	86
PID 2656 wrote to memory of 2724	2656	4c827c1e96610a872e929cae7fd2067d_JaffaCakes118.exe	86
PID 2656 wrote to memory of 2512	2656	4c827c1e96610a872e929cae7fd2067d_JaffaCakes118.exe	88
PID 2656 wrote to memory of 2512	2656	4c827c1e96610a872e929cae7fd2067d_JaffaCakes118.exe	88
PID 2656 wrote to memory of 2512	2656	4c827c1e96610a872e929cae7fd2067d_JaffaCakes118.exe	88