4919fc9810870f56e6b796dfb6696dd05b496cea66fd9d2821b93c62c0a826a9

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
26/07/2024, 10:13

Target

739dd9d02954f39f43caf31d60e8f2c0_JaffaCakes118.exe
Size

50KB
MD5

739dd9d02954f39f43caf31d60e8f2c0
SHA1

9b60c61f32b3cd7d90f2f532fb13442559770573
SHA256

4919fc9810870f56e6b796dfb6696dd05b496cea66fd9d2821b93c62c0a826a9
SHA512

5e11fd37e38d4cf8e34d44a40073253c56e27373087c03f1d25b87c0558ee8d387e378e0058090412b40f382bd15ec7d97d19795f31da564492cef8df6704af2
SSDEEP

768:vUjKVjl9xw3x6nz7vj1wrCRDBKnkTWpm1JgFLIqtclsbqztRXIF54QWnXENC:vUKJ3zzj1w2zK1iet7tcCbqz/myXmC

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2112	739dd9d02954f39f43caf31d60e8f2c0_JaffaCakes118.exe
2112	739dd9d02954f39f43caf31d60e8f2c0_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2112 wrote to memory of 1244	2112	739dd9d02954f39f43caf31d60e8f2c0_JaffaCakes118.exe	21
PID 2112 wrote to memory of 1244	2112	739dd9d02954f39f43caf31d60e8f2c0_JaffaCakes118.exe	21
PID 2112 wrote to memory of 1244	2112	739dd9d02954f39f43caf31d60e8f2c0_JaffaCakes118.exe	21
PID 2112 wrote to memory of 1244	2112	739dd9d02954f39f43caf31d60e8f2c0_JaffaCakes118.exe	21
PID 2112 wrote to memory of 1244	2112	739dd9d02954f39f43caf31d60e8f2c0_JaffaCakes118.exe	21
PID 2112 wrote to memory of 1244	2112	739dd9d02954f39f43caf31d60e8f2c0_JaffaCakes118.exe	21

memory/1244-1-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1244-9-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2112-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2112-5-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download