c1961d28716d42964e3038be86fe7a704017364dc6719eed1cc70e97eed82e3c

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
27/07/2024, 14:13

Target

78720d64d670353b2a0786695ffc6bfe_JaffaCakes118.exe
Size

329KB
MD5

78720d64d670353b2a0786695ffc6bfe
SHA1

e5e182d3b74679187e00268f904cd585cf589953
SHA256

c1961d28716d42964e3038be86fe7a704017364dc6719eed1cc70e97eed82e3c
SHA512

0738ee5fedc7f15908426499d25c84e6d3adc70778c065ce1c7c7b1cd8a7e44ccc0efbde6fe1d634033e210a3a73141890caf03b1c0e7f635e8eeea23410b0cc
SSDEEP

3072:5aVMdmDBnc+FjUwP8pTxdNgocG7TCSNKuboAoe05b7hrMTNO+DsFwI781uwuBR5:sgZs8pTlxcG72SNBbb10Z7oDKP77wM

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2720	78720d64d670353b2a0786695ffc6bfe_JaffaCakes118.exe

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2720	78720d64d670353b2a0786695ffc6bfe_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2720 wrote to memory of 1216	2720	78720d64d670353b2a0786695ffc6bfe_JaffaCakes118.exe	21
PID 2720 wrote to memory of 1216	2720	78720d64d670353b2a0786695ffc6bfe_JaffaCakes118.exe	21
PID 2720 wrote to memory of 1216	2720	78720d64d670353b2a0786695ffc6bfe_JaffaCakes118.exe	21
PID 2720 wrote to memory of 1216	2720	78720d64d670353b2a0786695ffc6bfe_JaffaCakes118.exe	21
PID 2720 wrote to memory of 1216	2720	78720d64d670353b2a0786695ffc6bfe_JaffaCakes118.exe	21

memory/2720-0-0x0000000000400000-0x000000000045A000-memory.dmp

Filesize
360KB

Download
memory/2720-1-0x0000000000220000-0x0000000000243000-memory.dmp

Filesize
140KB

Download
memory/2720-2-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2720-3-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download