d44f7d2c264179e92c8f55f42858876d43da02499c18cde4f0e2d9c819a5fef3

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
16/07/2024, 06:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4d38481afd28286814ff4db9cf8419a5_JaffaCakes118.dll
Size

140KB
MD5

4d38481afd28286814ff4db9cf8419a5
SHA1

8408186d4dd68776820f93cfc3ae21504889e7c9
SHA256

d44f7d2c264179e92c8f55f42858876d43da02499c18cde4f0e2d9c819a5fef3
SHA512

228666d5ff773fb8a7cece0a79801391a022d5508b0fc4184a204e15cbf8e73511909e1ae28355fdc55b6db0befaaa696aca99d4ed3aeb182ad1dab30b4e334d
SSDEEP

3072:1QMt6E7Ej1vIrroNoK/OlDzYLnUDOtyL2Fs7m24X9jYOtuuGVw97rrK:moExvIQVeYLnUDO02F+m24NUBugwV

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2652 wrote to memory of 1736	2652	rundll32.exe	30
PID 2652 wrote to memory of 1736	2652	rundll32.exe	30
PID 2652 wrote to memory of 1736	2652	rundll32.exe	30
PID 2652 wrote to memory of 1736	2652	rundll32.exe	30
PID 2652 wrote to memory of 1736	2652	rundll32.exe	30
PID 2652 wrote to memory of 1736	2652	rundll32.exe	30
PID 2652 wrote to memory of 1736	2652	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4d38481afd28286814ff4db9cf8419a5_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2652
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4d38481afd28286814ff4db9cf8419a5_JaffaCakes118.dll,#1
  2⤵
  PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1736-5-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-4-0x0000000010000000-0x000000001002B000-memory.dmp

Filesize
172KB

Download
memory/1736-3-0x0000000010000000-0x000000001002B000-memory.dmp

Filesize
172KB

Download
memory/1736-2-0x0000000010000000-0x000000001002B000-memory.dmp

Filesize
172KB

Download
memory/1736-1-0x0000000010000000-0x000000001002B000-memory.dmp

Filesize
172KB

Download
memory/1736-0-0x0000000010000000-0x000000001002B000-memory.dmp

Filesize
172KB

Download
memory/1736-6-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-8-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-16-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-20-0x0000000010000000-0x000000001002B000-memory.dmp

Filesize
172KB

Download
memory/1736-19-0x0000000010001000-0x0000000010010000-memory.dmp

Filesize
60KB

Download
memory/1736-18-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-15-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-14-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-13-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-12-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-11-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-10-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-9-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-7-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download
memory/1736-17-0x00000000001D0000-0x000000000021B000-memory.dmp

Filesize
300KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads