1ca6153a08a2ec17052ee552e5ebb5ae0b9464903ccbc15983ba998b872c91f5

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
19-08-2024 03:40

Target

a970f31f7a1526119b8ce403a67c5555_JaffaCakes118.exe
Size

183KB
MD5

a970f31f7a1526119b8ce403a67c5555
SHA1

40e63113af3b4ee1c7aa94063e339c7dbda0d96d
SHA256

1ca6153a08a2ec17052ee552e5ebb5ae0b9464903ccbc15983ba998b872c91f5
SHA512

21bdf8bfa4a4a32b43a9ec38e37cf851e30ea3972ccfc0f0bc662de5fdda461321867b2b7302258e5eda74aaab635573db79f8d32be8d6b12b159b0648f7ee98
SSDEEP

768:P1n7DDTBeid/TeiZRVWRBwkXno0L7UTLuSnqUTW:97tXkXo8UTaSy

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
388	a970f31f7a1526119b8ce403a67c5555_JaffaCakes118.exe
388	a970f31f7a1526119b8ce403a67c5555_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 388 wrote to memory of 1192	388	a970f31f7a1526119b8ce403a67c5555_JaffaCakes118.exe	21
PID 388 wrote to memory of 1192	388	a970f31f7a1526119b8ce403a67c5555_JaffaCakes118.exe	21
PID 388 wrote to memory of 1192	388	a970f31f7a1526119b8ce403a67c5555_JaffaCakes118.exe	21
PID 388 wrote to memory of 1192	388	a970f31f7a1526119b8ce403a67c5555_JaffaCakes118.exe	21

memory/388-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/388-1-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/388-14-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/388-15-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/1192-2-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1192-5-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download