c66f63b796790d84748abf6cbe6c6992fc3987a325c6e33b5f6ea3a024de0037

Analysis

max time kernel
14s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
27/07/2024, 04:48

Target

771b0a7c10c184ab316b18bf27909a49_JaffaCakes118.exe
Size

1.2MB
MD5

771b0a7c10c184ab316b18bf27909a49
SHA1

efea634292e6699f464078ebb1304b91a670ed26
SHA256

c66f63b796790d84748abf6cbe6c6992fc3987a325c6e33b5f6ea3a024de0037
SHA512

788737d8bffd3765b46b3c49b15ef3ba93200a7217735521e074e9e7255518471833543a7071ac62b5956c44baa9225d8cc8eee65419275bfc43b86b2e4c12b5
SSDEEP

24576:HQP4nbzu3s8rEAeq5hjzhjbW7afaZX2UHKw1HiszM8Rdyt2XOaXmkLe8c7SXet41:7nbz7KeafaZX2UHKwhnct2XpWw7ccAKD

Score

1^/10

Suspicious behavior: EnumeratesProcesses 3 IoCs

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 760 wrote to memory of 1192	760	771b0a7c10c184ab316b18bf27909a49_JaffaCakes118.exe	20
PID 760 wrote to memory of 1192	760	771b0a7c10c184ab316b18bf27909a49_JaffaCakes118.exe	20
PID 760 wrote to memory of 1192	760	771b0a7c10c184ab316b18bf27909a49_JaffaCakes118.exe	20
PID 760 wrote to memory of 1192	760	771b0a7c10c184ab316b18bf27909a49_JaffaCakes118.exe	20
PID 760 wrote to memory of 1192	760	771b0a7c10c184ab316b18bf27909a49_JaffaCakes118.exe	20
PID 760 wrote to memory of 1192	760	771b0a7c10c184ab316b18bf27909a49_JaffaCakes118.exe	20

memory/760-20-0x0000000000400000-0x0000000000B08000-memory.dmp

Filesize
7.0MB

Download
memory/760-1-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download
memory/760-2-0x0000000002710000-0x00000000027F5000-memory.dmp

Filesize
916KB

Download
memory/760-3-0x0000000002580000-0x0000000002690000-memory.dmp

Filesize
1.1MB

Download
memory/760-5-0x0000000000401000-0x0000000000408000-memory.dmp

Filesize
28KB

Download
memory/760-12-0x0000000000400000-0x0000000000B08000-memory.dmp

Filesize
7.0MB

Download
memory/760-16-0x0000000000400000-0x0000000000B08000-memory.dmp

Filesize
7.0MB

Download
memory/760-0-0x0000000000400000-0x0000000000B08000-memory.dmp

Filesize
7.0MB

Download
memory/760-24-0x0000000000400000-0x0000000000B08000-memory.dmp

Filesize
7.0MB

Download
memory/760-29-0x0000000000400000-0x0000000000B08000-memory.dmp

Filesize
7.0MB

Download
memory/760-30-0x0000000000400000-0x0000000000B08000-memory.dmp

Filesize
7.0MB

Download
memory/1192-6-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1192-13-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download