8e0f12e42eebd4ba890caf9539f8aeb870a4b584f3c6bcb3bd2fd8738a093548

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
27/07/2024, 11:24

Target

7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe
Size

97KB
MD5

7808a23dc6490fc335c75de0ad6b3d64
SHA1

0028164ce187296226d4b5b73349938657f2e980
SHA256

8e0f12e42eebd4ba890caf9539f8aeb870a4b584f3c6bcb3bd2fd8738a093548
SHA512

ad16d94620df34da0b35e4abea3b90ebd62906d0855c04cf8db09b13c7544551d33eba707709d4258bb47d40c8db68da730d61c1e2c1d1c852bdc503b0fa2811
SSDEEP

1536:GeX9tBNup1oKst0is5L4nw6uMv74TJ0fWwXG9vV:/X9HnsNiw6uMv74ccvV

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2960 wrote to memory of 2392	2960	7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe	30
PID 2960 wrote to memory of 2392	2960	7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe	30
PID 2960 wrote to memory of 2392	2960	7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2960
- C:\Users\Admin\AppData\Local\Temp\7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe
  2⤵
  PID:2392

memory/2960-0-0x000007FEF5E0E000-0x000007FEF5E0F000-memory.dmp

Filesize
4KB

Download
memory/2960-1-0x000007FEF5B50000-0x000007FEF64ED000-memory.dmp

Filesize
9.6MB

Download