ed2c647c65c948433ec11d523fb0d952c473fe4c6629493f8ad48f057c9ae7cf

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 07:44

Target

6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe
Size

246KB
MD5

6258a38f51717749769d40989abb6d5a
SHA1

926c81134f4f1eeae01bdaf64953654636c5e6b3
SHA256

ed2c647c65c948433ec11d523fb0d952c473fe4c6629493f8ad48f057c9ae7cf
SHA512

04fbff5c0ebb38493295fd7fa54e063fd151ed461da62df288f0fe2ac873b7651fba2207c13a814b1d9ad058bad7de73a7f02ad0ea0a5adcc80fb93164f24977
SSDEEP

6144:3f7YeyUpc3VizWUkzwm4iqTu5jyLfbJSf8/6jVIYf0p:3aUpc3Vplxh5uzbJx3Yfy

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 3032 wrote to memory of 3040	3032	6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe	30
PID 3032 wrote to memory of 3040	3032	6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe	30
PID 3032 wrote to memory of 3040	3032	6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe	30
PID 3032 wrote to memory of 3040	3032	6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe	30
PID 3032 wrote to memory of 3040	3032	6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe	30
PID 3032 wrote to memory of 3040	3032	6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe	30
PID 3032 wrote to memory of 3040	3032	6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3032
- C:\Users\Admin\AppData\Local\Temp\6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\6258a38f51717749769d40989abb6d5a_JaffaCakes118.exe -deleter
  2⤵
  PID:3040

C:\Users\Admin\AppData\Local\Temp\ISPackFiles.ini

Filesize
263B

MD5
2419e22d855ceb4a726543e8cf3332f5

SHA1
3d7a742e312c504d173b785455b414699d0fa6d6

SHA256
1b5989b4b58eab20e817365950cecb1c8874e02fe785d23cb15b6a8a7804af4c

SHA512
a941cd6054a57608641be4433a9b19639c5b5c1d4f9e7f1493f8a908eafdaf923cf78f329bbfe19ae08edef6dce501f0e606de221673a95d3ec5a116bcf490b1

Download Submit