c66cb135cea5870fd1d4df18ebd96bb63d661b543f8d3da14538c8a63bac1304

Analysis

max time kernel
149s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 10:44

Target

62ec210a30cd1c21bc29b3a8528b1e33_JaffaCakes118.exe
Size

102KB
MD5

62ec210a30cd1c21bc29b3a8528b1e33
SHA1

7cfb4076abb6b0396621dd89cbf0568e5ecec75b
SHA256

c66cb135cea5870fd1d4df18ebd96bb63d661b543f8d3da14538c8a63bac1304
SHA512

f50a9b70407100e039f76722b9625b389c2576ca62ded3faef16c8c998f82f8c02edc223e82454b240df95be9f73b7be52bd96d76a40d600a3cb57350213210c
SSDEEP

3072:d7ZH3xEGu2ZiTyDv17gBOFG61dI3xpqZ:hZH3xEGu/2lg0Fx1dW

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2948	62ec210a30cd1c21bc29b3a8528b1e33_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2948 wrote to memory of 2424	2948	62ec210a30cd1c21bc29b3a8528b1e33_JaffaCakes118.exe	30
PID 2948 wrote to memory of 2424	2948	62ec210a30cd1c21bc29b3a8528b1e33_JaffaCakes118.exe	30
PID 2948 wrote to memory of 2424	2948	62ec210a30cd1c21bc29b3a8528b1e33_JaffaCakes118.exe	30
PID 2948 wrote to memory of 2424	2948	62ec210a30cd1c21bc29b3a8528b1e33_JaffaCakes118.exe	30
PID 2948 wrote to memory of 2424	2948	62ec210a30cd1c21bc29b3a8528b1e33_JaffaCakes118.exe	30
PID 2948 wrote to memory of 2424	2948	62ec210a30cd1c21bc29b3a8528b1e33_JaffaCakes118.exe	30
PID 2948 wrote to memory of 2424	2948	62ec210a30cd1c21bc29b3a8528b1e33_JaffaCakes118.exe	30

memory/2424-3-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2424-2-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2424-4-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2424-9-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2948-0-0x0000000000420000-0x0000000000422000-memory.dmp

Filesize
8KB

Download
memory/2948-1-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2948-6-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download