8e0f12e42eebd4ba890caf9539f8aeb870a4b584f3c6bcb3bd2fd8738a093548

Analysis

max time kernel
135s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
27-07-2024 11:24

Target

7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe
Size

97KB
MD5

7808a23dc6490fc335c75de0ad6b3d64
SHA1

0028164ce187296226d4b5b73349938657f2e980
SHA256

8e0f12e42eebd4ba890caf9539f8aeb870a4b584f3c6bcb3bd2fd8738a093548
SHA512

ad16d94620df34da0b35e4abea3b90ebd62906d0855c04cf8db09b13c7544551d33eba707709d4258bb47d40c8db68da730d61c1e2c1d1c852bdc503b0fa2811
SSDEEP

1536:GeX9tBNup1oKst0is5L4nw6uMv74TJ0fWwXG9vV:/X9HnsNiw6uMv74ccvV

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4376 wrote to memory of 4728	4376	7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe	84
PID 4376 wrote to memory of 4728	4376	7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe	84

C:\Users\Admin\AppData\Local\Temp\7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4376
- C:\Users\Admin\AppData\Local\Temp\7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\7808a23dc6490fc335c75de0ad6b3d64_JaffaCakes118.exe
  2⤵
  PID:4728

memory/4376-0-0x00007FFB99935000-0x00007FFB99936000-memory.dmp

Filesize
4KB

Download
memory/4376-1-0x00007FFB99680000-0x00007FFB9A021000-memory.dmp

Filesize
9.6MB

Download
memory/4376-2-0x000000001C010000-0x000000001C4DE000-memory.dmp

Filesize
4.8MB

Download
memory/4376-3-0x000000001C590000-0x000000001C636000-memory.dmp

Filesize
664KB

Download
memory/4376-4-0x00007FFB99680000-0x00007FFB9A021000-memory.dmp

Filesize
9.6MB

Download
memory/4376-6-0x00007FFB99680000-0x00007FFB9A021000-memory.dmp

Filesize
9.6MB

Download