1c301f10bb4af888aead9440067b7b1e0a0d1eda18a41ba753c0e3cbce3a28c0

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22/08/2024, 19:21

Target

b8d53c619795fabae2450963a40cb879_JaffaCakes118.exe
Size

208KB
MD5

b8d53c619795fabae2450963a40cb879
SHA1

6245cd688aaf88bf440ef5de7a9aa0bf67482bfe
SHA256

1c301f10bb4af888aead9440067b7b1e0a0d1eda18a41ba753c0e3cbce3a28c0
SHA512

f1c3d96ccaaa5f14b6fb78bb06de445b61336a64dc4cd99c8ac04db842cecff73b926788f68ed3370654de5200f3cff625e006bdaf8695981445ead93dfd5eef
SSDEEP

3072:s9MVX88N+rrZ+8TohOS3cUd8HOhvoL8M0erEZ3kh3y+gtduiMxWQC3:s9u9N+3S3cLHOWz0QEZAALJM0Qe

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2340	b8d53c619795fabae2450963a40cb879_JaffaCakes118.exe

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2340	b8d53c619795fabae2450963a40cb879_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2340 wrote to memory of 1268	2340	b8d53c619795fabae2450963a40cb879_JaffaCakes118.exe	21
PID 2340 wrote to memory of 1268	2340	b8d53c619795fabae2450963a40cb879_JaffaCakes118.exe	21
PID 2340 wrote to memory of 1268	2340	b8d53c619795fabae2450963a40cb879_JaffaCakes118.exe	21
PID 2340 wrote to memory of 1268	2340	b8d53c619795fabae2450963a40cb879_JaffaCakes118.exe	21
PID 2340 wrote to memory of 1268	2340	b8d53c619795fabae2450963a40cb879_JaffaCakes118.exe	21

memory/2340-0-0x00000000003B0000-0x00000000003D3000-memory.dmp

Filesize
140KB

Download
memory/2340-1-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2340-2-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download