5013a7bcfedc96717f381a6cbc0acc63be20146f27f47eb8cc1bbf6a0b80a3e0

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
20-08-2024 10:51

Target

aeef6a9d54b4f504cd7789baa7ddebf1_JaffaCakes118.exe
Size

1.1MB
MD5

aeef6a9d54b4f504cd7789baa7ddebf1
SHA1

a8ec39edaddb83bc508b19821fe0443198f2bf59
SHA256

5013a7bcfedc96717f381a6cbc0acc63be20146f27f47eb8cc1bbf6a0b80a3e0
SHA512

cddbcab67a4e7d482b8cb93e740ef43ce94e08ae4af748cf65232c6e9f0a7ab562a4c3fbf0e5ae626d4b92fbfd8cc3aa8d3f5ac98e4ed7a6b31bab0a1a737f43
SSDEEP

24576:Mq2yPdCTrpmNM0zrshVi/78QWLMpb+8ub1PyE6ffMmy34bJzFNNqCq:jJdCBeNXshOTWE+/Z6E2fRz4

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2404	aeef6a9d54b4f504cd7789baa7ddebf1_JaffaCakes118.exe
2404	aeef6a9d54b4f504cd7789baa7ddebf1_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2404 wrote to memory of 1204	2404	aeef6a9d54b4f504cd7789baa7ddebf1_JaffaCakes118.exe	21
PID 2404 wrote to memory of 1204	2404	aeef6a9d54b4f504cd7789baa7ddebf1_JaffaCakes118.exe	21
PID 2404 wrote to memory of 1204	2404	aeef6a9d54b4f504cd7789baa7ddebf1_JaffaCakes118.exe	21
PID 2404 wrote to memory of 1204	2404	aeef6a9d54b4f504cd7789baa7ddebf1_JaffaCakes118.exe	21
PID 2404 wrote to memory of 1204	2404	aeef6a9d54b4f504cd7789baa7ddebf1_JaffaCakes118.exe	21
PID 2404 wrote to memory of 1204	2404	aeef6a9d54b4f504cd7789baa7ddebf1_JaffaCakes118.exe	21

memory/1204-6-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1204-12-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2404-0-0x00000000002A0000-0x00000000002A1000-memory.dmp

Filesize
4KB

Download
memory/2404-1-0x0000000001DC0000-0x0000000001EAE000-memory.dmp

Filesize
952KB

Download
memory/2404-2-0x0000000000400000-0x000000000051C000-memory.dmp

Filesize
1.1MB

Download
memory/2404-3-0x0000000000401000-0x0000000000408000-memory.dmp

Filesize
28KB

Download
memory/2404-4-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2404-5-0x0000000000400000-0x000000000051C000-memory.dmp

Filesize
1.1MB

Download