ffcbf3f09296ae9bd428f7bf78b50251963c2eac6b0af9e7ee62550d8ffc9007

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
24-08-2024 04:03

Target

bddb616dd04f2a6b889438a2b44ef00e_JaffaCakes118.exe
Size

2.4MB
MD5

bddb616dd04f2a6b889438a2b44ef00e
SHA1

739e9bc8e988efb563e612714cb944a1ea0ec8ac
SHA256

ffcbf3f09296ae9bd428f7bf78b50251963c2eac6b0af9e7ee62550d8ffc9007
SHA512

1e69f5a2c2e2bfb4333b47e6bb27303ead5efbd1ae0348ce291793add4ccf13b08d66f513e156e697e1b29b61bc95fd5160b731449549cbb25ea204150456ffe
SSDEEP

24576:9wYExlKEPv2IATUyNFbDqx3ISdGTwbPcasq0ymjbyjPCUopX1oqCPXc:9w9KEmZTUyNFfqx4SsTwbtsZymMZfc

Score

1^/10

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
2500	bddb616dd04f2a6b889438a2b44ef00e_JaffaCakes118.exe
2500	bddb616dd04f2a6b889438a2b44ef00e_JaffaCakes118.exe
2500	bddb616dd04f2a6b889438a2b44ef00e_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2500 wrote to memory of 1212	2500	bddb616dd04f2a6b889438a2b44ef00e_JaffaCakes118.exe	21
PID 2500 wrote to memory of 1212	2500	bddb616dd04f2a6b889438a2b44ef00e_JaffaCakes118.exe	21
PID 2500 wrote to memory of 1212	2500	bddb616dd04f2a6b889438a2b44ef00e_JaffaCakes118.exe	21
PID 2500 wrote to memory of 1212	2500	bddb616dd04f2a6b889438a2b44ef00e_JaffaCakes118.exe	21
PID 2500 wrote to memory of 1212	2500	bddb616dd04f2a6b889438a2b44ef00e_JaffaCakes118.exe	21
PID 2500 wrote to memory of 1212	2500	bddb616dd04f2a6b889438a2b44ef00e_JaffaCakes118.exe	21

memory/1212-11-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1212-17-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2500-0-0x0000000000400000-0x0000000000B03000-memory.dmp

Filesize
7.0MB

Download
memory/2500-3-0x0000000002660000-0x0000000002770000-memory.dmp

Filesize
1.1MB

Download
memory/2500-2-0x0000000002B70000-0x0000000002C54000-memory.dmp

Filesize
912KB

Download
memory/2500-1-0x00000000024A0000-0x00000000024A1000-memory.dmp

Filesize
4KB

Download
memory/2500-8-0x0000000000401000-0x0000000000408000-memory.dmp

Filesize
28KB

Download
memory/2500-7-0x0000000004FC0000-0x0000000004FC1000-memory.dmp

Filesize
4KB

Download
memory/2500-6-0x0000000004FE0000-0x0000000004FE1000-memory.dmp

Filesize
4KB

Download
memory/2500-10-0x0000000000400000-0x0000000000B03000-memory.dmp

Filesize
7.0MB

Download
memory/2500-5-0x0000000004FD0000-0x0000000004FD2000-memory.dmp

Filesize
8KB

Download
memory/2500-30-0x0000000000400000-0x0000000000B03000-memory.dmp

Filesize
7.0MB

Download