4df71316f48d6e405464ed121984612a0e09961aad635a393aea5432c436c6ff

Analysis

max time kernel
139s
max time network
105s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22-07-2024 20:34

Target

64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe
Size

64KB
MD5

64b4bd4d0d7aa3ccb85a579258f218d0
SHA1

8c017006a6537ce6a277517b54fcec1fce524868
SHA256

4df71316f48d6e405464ed121984612a0e09961aad635a393aea5432c436c6ff
SHA512

99ec696b14303cd9647ec0623a6a36ecd7f6ef721e8d2a2ab5f4a41e65886ddac5006b77f099edb3cf838d811214353514961b8fc5594e216643eac94fcab43a
SSDEEP

768:03JJfx+Ml5qQ2SYQNqS8atBuvniQP7av8BYBLCg5t77xGHAryObwrp68kXXaWNY1:05MQQaqS9tQX+WsGHGyA0pnk6WVD0EB8

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2348 set thread context of 1436	2348	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe	84

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2348	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe
2348	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe
1436	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe
1436	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe
1436	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe
1436	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2348 wrote to memory of 1436	2348	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe	84
PID 2348 wrote to memory of 1436	2348	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe	84
PID 2348 wrote to memory of 1436	2348	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe	84
PID 2348 wrote to memory of 1436	2348	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe	84
PID 2348 wrote to memory of 1436	2348	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe	84
PID 2348 wrote to memory of 1436	2348	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe	84
PID 1436 wrote to memory of 3392	1436	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe	56
PID 1436 wrote to memory of 3392	1436	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe	56
PID 1436 wrote to memory of 3392	1436	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe	56
PID 1436 wrote to memory of 3392	1436	64b4bd4d0d7aa3ccb85a579258f218d0_JaffaCakes118.exe	56

memory/1436-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1436-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1436-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1436-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3392-6-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3392-7-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download