d377fbdc3f304e2760215d375f2650d3034d972f1072a6395d168fc32166d82d

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
20/07/2024, 05:31

Target

5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe
Size

200KB
MD5

5f33d6aceb303f3e43ea759445b7817c
SHA1

5f48f241627490fd3ca14f335c216c94220d59df
SHA256

d377fbdc3f304e2760215d375f2650d3034d972f1072a6395d168fc32166d82d
SHA512

771e0fa08b97e206f6d5732b7c61b094a94e97842d32c0db1748fcab31faa00e2f2f6dae0adbd8bace52a254063f01724fb3ca22efa8d8325a981072e8af9b09
SSDEEP

3072:A6ihfq48XsN2zI+rCNTRWfEDEVmq67W5xSVpgnXnMP1mFPn56JVQ:AXfq488N2zZmafEQR5xSAnMP1Qv56T

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2068	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2088	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 2068	2088	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	31
PID 2088 wrote to memory of 2068	2088	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	31
PID 2088 wrote to memory of 2068	2088	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	31
PID 2088 wrote to memory of 2068	2088	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	31
PID 2088 wrote to memory of 2068	2088	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	31
PID 2088 wrote to memory of 2068	2088	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	31
PID 2088 wrote to memory of 2068	2088	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	31
PID 2088 wrote to memory of 2068	2088	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	31
PID 2088 wrote to memory of 2068	2088	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	31
PID 2068 wrote to memory of 1176	2068	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	21
PID 2068 wrote to memory of 1176	2068	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	21
PID 2068 wrote to memory of 1176	2068	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	21
PID 2068 wrote to memory of 1176	2068	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	21
PID 2068 wrote to memory of 1176	2068	5f33d6aceb303f3e43ea759445b7817c_JaffaCakes118.exe	21

memory/2068-3-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2068-2-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2068-4-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2068-6-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download