8711057b5dae9a6cab3a9395407e273740fc3977e66356ffa87d33cd939a223d

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
19-09-2024 06:36

Target

eac56f8c5b4f0824b5afdab0a1ef6fde_JaffaCakes118.exe
Size

1.5MB
MD5

eac56f8c5b4f0824b5afdab0a1ef6fde
SHA1

091dbb0f922b9395209cd2585e0b3839e6a57b37
SHA256

8711057b5dae9a6cab3a9395407e273740fc3977e66356ffa87d33cd939a223d
SHA512

8e354db7b5949fbd4aaf93b31084689857e1dd5b066d0a185afd68f2b2fa4895b713ad48d225ac1698abc3e3b16949a0cfcbbe5be7d6ef5317b6e65ca6801b66
SSDEEP

24576:XAfy+0ea5AdXzidPyDPDGxrF/yjSltQs6F6iFk/Kv4:XNVeaOdDiwz0k8GVIQk/Kv4

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2080	eac56f8c5b4f0824b5afdab0a1ef6fde_JaffaCakes118.exe
2080	eac56f8c5b4f0824b5afdab0a1ef6fde_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2080 wrote to memory of 1184	2080	eac56f8c5b4f0824b5afdab0a1ef6fde_JaffaCakes118.exe	21
PID 2080 wrote to memory of 1184	2080	eac56f8c5b4f0824b5afdab0a1ef6fde_JaffaCakes118.exe	21
PID 2080 wrote to memory of 1184	2080	eac56f8c5b4f0824b5afdab0a1ef6fde_JaffaCakes118.exe	21
PID 2080 wrote to memory of 1184	2080	eac56f8c5b4f0824b5afdab0a1ef6fde_JaffaCakes118.exe	21
PID 2080 wrote to memory of 1184	2080	eac56f8c5b4f0824b5afdab0a1ef6fde_JaffaCakes118.exe	21
PID 2080 wrote to memory of 1184	2080	eac56f8c5b4f0824b5afdab0a1ef6fde_JaffaCakes118.exe	21

memory/1184-4-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1184-11-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2080-1-0x0000000001DC0000-0x0000000001F12000-memory.dmp

Filesize
1.3MB

Download
memory/2080-0-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download
memory/2080-3-0x0000000000400000-0x0000000000580000-memory.dmp

Filesize
1.5MB

Download
memory/2080-2-0x0000000000401000-0x0000000000408000-memory.dmp

Filesize
28KB

Download