3bbf38e2ab61e96183f41ae749929a35a607461c98de0dc674bacfe58f3fbd67

Analysis

max time kernel
149s
max time network
125s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 11:02

Target

62f9a7f77039b9ff02d60eb74bfb53a4_JaffaCakes118.exe
Size

85KB
MD5

62f9a7f77039b9ff02d60eb74bfb53a4
SHA1

93c446af4fd0e2a1bbc6248780192e2263479a54
SHA256

3bbf38e2ab61e96183f41ae749929a35a607461c98de0dc674bacfe58f3fbd67
SHA512

eb7569b2f26e274d989a2580976f9b0407857af866e3a6d324e0c2bdcc519460d36f0c17be449237a3105d366c93843f7a52e6862ee82ce2d5ce3fdbabcecd12
SSDEEP

1536:46MsLFlqO4L1K450hA0lskRYZjL4Z26mjZNfc2s2OkddZFaH:4KGGS0rska7rRsmRF

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2948	62f9a7f77039b9ff02d60eb74bfb53a4_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2948 wrote to memory of 1604	2948	62f9a7f77039b9ff02d60eb74bfb53a4_JaffaCakes118.exe	30
PID 2948 wrote to memory of 1604	2948	62f9a7f77039b9ff02d60eb74bfb53a4_JaffaCakes118.exe	30
PID 2948 wrote to memory of 1604	2948	62f9a7f77039b9ff02d60eb74bfb53a4_JaffaCakes118.exe	30
PID 2948 wrote to memory of 1604	2948	62f9a7f77039b9ff02d60eb74bfb53a4_JaffaCakes118.exe	30
PID 2948 wrote to memory of 1604	2948	62f9a7f77039b9ff02d60eb74bfb53a4_JaffaCakes118.exe	30
PID 2948 wrote to memory of 1604	2948	62f9a7f77039b9ff02d60eb74bfb53a4_JaffaCakes118.exe	30
PID 2948 wrote to memory of 1604	2948	62f9a7f77039b9ff02d60eb74bfb53a4_JaffaCakes118.exe	30

memory/1604-4-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1604-3-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1604-8-0x00000000002C0000-0x00000000002C8000-memory.dmp

Filesize
32KB

Download
memory/1604-7-0x00000000002C2000-0x00000000002C3000-memory.dmp

Filesize
4KB

Download
memory/2948-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2948-6-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download