31451108698dce42735375f0df7f5b1ebf5752cb06bc3cc258a3b5f2f6baeb31

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
17-08-2024 18:24

Target

a3a2582772bf5a4c177a09f5c5f2ebbf_JaffaCakes118.exe
Size

83KB
MD5

a3a2582772bf5a4c177a09f5c5f2ebbf
SHA1

3fdda1ba0c68870647e9c379523c101b029e6238
SHA256

31451108698dce42735375f0df7f5b1ebf5752cb06bc3cc258a3b5f2f6baeb31
SHA512

44064c2a67a1f84c2f82db6f86faef3609d6b938ca1905045452a75b365dd1e5ed68ad3b56de4609a4a887a76604803a7833970b0614ae6b9d59511ff4db31fa
SSDEEP

1536:bek9/BNup1oKst0is5L4nw6uMcZuzseV+m+q1:ak99nsNiw6uMcZuz7+E1

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1568 wrote to memory of 3332	1568	a3a2582772bf5a4c177a09f5c5f2ebbf_JaffaCakes118.exe	84
PID 1568 wrote to memory of 3332	1568	a3a2582772bf5a4c177a09f5c5f2ebbf_JaffaCakes118.exe	84

C:\Users\Admin\AppData\Local\Temp\a3a2582772bf5a4c177a09f5c5f2ebbf_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a3a2582772bf5a4c177a09f5c5f2ebbf_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1568
- C:\Users\Admin\AppData\Local\Temp\a3a2582772bf5a4c177a09f5c5f2ebbf_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\a3a2582772bf5a4c177a09f5c5f2ebbf_JaffaCakes118.exe
  2⤵
  PID:3332

memory/1568-0-0x00007FFEADBF5000-0x00007FFEADBF6000-memory.dmp

Filesize
4KB

Download
memory/1568-1-0x00007FFEAD940000-0x00007FFEAE2E1000-memory.dmp

Filesize
9.6MB

Download
memory/1568-2-0x000000001C240000-0x000000001C70E000-memory.dmp

Filesize
4.8MB

Download
memory/1568-3-0x000000001C7C0000-0x000000001C866000-memory.dmp

Filesize
664KB

Download
memory/1568-6-0x00007FFEAD940000-0x00007FFEAE2E1000-memory.dmp

Filesize
9.6MB

Download
memory/1568-5-0x00007FFEAD940000-0x00007FFEAE2E1000-memory.dmp

Filesize
9.6MB

Download