535e649935c50909c2698c315b428348fbca2f892d8ad6322de294f2f750839c

Analysis

max time kernel
14s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
20-07-2024 07:18

Target

5f88edf48f9d8cce5dd257e6956d6c92_JaffaCakes118.dll
Size

160KB
MD5

5f88edf48f9d8cce5dd257e6956d6c92
SHA1

dc085d45bb8f9640f75bd02784e291c4dc205855
SHA256

535e649935c50909c2698c315b428348fbca2f892d8ad6322de294f2f750839c
SHA512

7810519531d64196b0a96c94ec91fcd3270a97267fd651a08ad7c2c82b1f8b08dff89f4977d1b08b4d28a69e60402087d6746eec922bafdd9f61a92d442c4aed
SSDEEP

3072:W71khp8tmF/BEDcc7nhQIhWP+tNuE1Orc1PKkmfMjJFeaH5K:WJtmAFnh2Pf631iqmu

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2028 wrote to memory of 2380	2028	rundll32.exe	29
PID 2028 wrote to memory of 2380	2028	rundll32.exe	29
PID 2028 wrote to memory of 2380	2028	rundll32.exe	29
PID 2028 wrote to memory of 2380	2028	rundll32.exe	29
PID 2028 wrote to memory of 2380	2028	rundll32.exe	29
PID 2028 wrote to memory of 2380	2028	rundll32.exe	29
PID 2028 wrote to memory of 2380	2028	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\5f88edf48f9d8cce5dd257e6956d6c92_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2028
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\5f88edf48f9d8cce5dd257e6956d6c92_JaffaCakes118.dll,#1
  2⤵
  PID:2380

memory/2380-1-0x0000000010000000-0x000000001002A000-memory.dmp

Filesize
168KB

Download
memory/2380-5-0x0000000010029000-0x000000001002A000-memory.dmp

Filesize
4KB

Download
memory/2380-4-0x0000000010000000-0x000000001002A000-memory.dmp

Filesize
168KB

Download
memory/2380-3-0x0000000010000000-0x000000001002A000-memory.dmp

Filesize
168KB

Download
memory/2380-2-0x0000000010000000-0x000000001002A000-memory.dmp

Filesize
168KB

Download
memory/2380-0-0x0000000010000000-0x000000001002A000-memory.dmp

Filesize
168KB

Download