485719d4009798969cf4ba4500d315c38e44764fb618592f2b6dc8631dfe1a14

Analysis

max time kernel
149s
max time network
122s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 16:24

Target

5cb78fd7ee3f1e9d6a274c2ba1b471c7_JaffaCakes118.exe
Size

171KB
MD5

5cb78fd7ee3f1e9d6a274c2ba1b471c7
SHA1

82c9d50bfa32cd3d584920ae12ea5037c2a9c7a7
SHA256

485719d4009798969cf4ba4500d315c38e44764fb618592f2b6dc8631dfe1a14
SHA512

d040b9c1833e3b187845d27b39487f51c3789a2bc81e45db7f0493e3c82873e930dc1b2c944bbda1cc64b555ea3c0c14367b8e36e5445fe545293d749af19cfd
SSDEEP

3072:ELCIbxQgNbUQvPS8BR+iQC00v0W4ZV18h8Yyyw7MOwgFnm8c513:EdQg7Te4w8YrwVj

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2452	5cb78fd7ee3f1e9d6a274c2ba1b471c7_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2452 wrote to memory of 1628	2452	5cb78fd7ee3f1e9d6a274c2ba1b471c7_JaffaCakes118.exe	30
PID 2452 wrote to memory of 1628	2452	5cb78fd7ee3f1e9d6a274c2ba1b471c7_JaffaCakes118.exe	30
PID 2452 wrote to memory of 1628	2452	5cb78fd7ee3f1e9d6a274c2ba1b471c7_JaffaCakes118.exe	30
PID 2452 wrote to memory of 1628	2452	5cb78fd7ee3f1e9d6a274c2ba1b471c7_JaffaCakes118.exe	30
PID 2452 wrote to memory of 1628	2452	5cb78fd7ee3f1e9d6a274c2ba1b471c7_JaffaCakes118.exe	30
PID 2452 wrote to memory of 1628	2452	5cb78fd7ee3f1e9d6a274c2ba1b471c7_JaffaCakes118.exe	30
PID 2452 wrote to memory of 1628	2452	5cb78fd7ee3f1e9d6a274c2ba1b471c7_JaffaCakes118.exe	30

memory/1628-1-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1628-4-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1628-0-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1628-8-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2452-3-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2452-2-0x0000000000350000-0x0000000000351000-memory.dmp

Filesize
4KB

Download