86b896b18b90475dd4671c98c10217c56ff59d3f02facc068797c1d3435fdc40

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
21/07/2024, 23:35

Target

61e2856722b50caffd5e1d6804227124_JaffaCakes118.exe
Size

24KB
MD5

61e2856722b50caffd5e1d6804227124
SHA1

857a9c3770e35fa28125c0d10227249eb14d06cd
SHA256

86b896b18b90475dd4671c98c10217c56ff59d3f02facc068797c1d3435fdc40
SHA512

9d3a7b84e0bfdad1ddef0980cdb994ee8387ac878ba6ae265313e8f801c64733b247e354e5e5684a023d1b914218c89f89cadca28333dbb86992ebe663fb5164
SSDEEP

192:K+8z97v6aznP3ob1WNWjeS6pNkEILXHGf5ahfdF69yJnAZ+zapuJ2/5hU1kN:H8pSar34bjejQ1LXVF6Mng+zb2/5hHN

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2296	61e2856722b50caffd5e1d6804227124_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 2456	2296	61e2856722b50caffd5e1d6804227124_JaffaCakes118.exe	30
PID 2296 wrote to memory of 2456	2296	61e2856722b50caffd5e1d6804227124_JaffaCakes118.exe	30
PID 2296 wrote to memory of 2456	2296	61e2856722b50caffd5e1d6804227124_JaffaCakes118.exe	30
PID 2296 wrote to memory of 2456	2296	61e2856722b50caffd5e1d6804227124_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\61e2856722b50caffd5e1d6804227124_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\61e2856722b50caffd5e1d6804227124_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2296
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c copy "C:\Users\Admin\AppData\Local\Temp\61e2856722b50caffd5e1d6804227124_JaffaCakes118.exe" "C:\Users\Admin\AppData\Local\Temp\file.rst"
  2⤵
  PID:2456

C:\Users\Admin\AppData\Local\Temp\file.rst

Filesize
24KB

MD5
61e2856722b50caffd5e1d6804227124

SHA1
857a9c3770e35fa28125c0d10227249eb14d06cd

SHA256
86b896b18b90475dd4671c98c10217c56ff59d3f02facc068797c1d3435fdc40

SHA512
9d3a7b84e0bfdad1ddef0980cdb994ee8387ac878ba6ae265313e8f801c64733b247e354e5e5684a023d1b914218c89f89cadca28333dbb86992ebe663fb5164

Download Submit