e6e5eb92be39512891b242646b6c0dd5043a2d8b8095fb86f27a80ab9c4b2ab3

Analysis

max time kernel
16s
max time network
18s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
26-09-2024 00:22

Target

f7273f12b5c8b90d33abc3fd984ecb30_JaffaCakes118.exe
Size

56KB
MD5

f7273f12b5c8b90d33abc3fd984ecb30
SHA1

05f30b626f86d094bec9f37298678caf937b4459
SHA256

e6e5eb92be39512891b242646b6c0dd5043a2d8b8095fb86f27a80ab9c4b2ab3
SHA512

b13310e6acf3834030202a9038476f888b2d18f02501a19cf3999d28c107062ed6af4fcb25f876553d71fe9815ae1c3ecad614b829cfcf6c374acc85c94c8a7e
SSDEEP

768:FcevFIYm0on6HGavZRtQffoaFNnioeQpYGvIkRDz4ua/k/Uz3nvnUIh+Dt6FBATY:ncV6HGavqgavRDsuQwqfU6BFchfUWIv

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1756	f7273f12b5c8b90d33abc3fd984ecb30_JaffaCakes118.exe
1756	f7273f12b5c8b90d33abc3fd984ecb30_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1756 wrote to memory of 1404	1756	f7273f12b5c8b90d33abc3fd984ecb30_JaffaCakes118.exe	20
PID 1756 wrote to memory of 1404	1756	f7273f12b5c8b90d33abc3fd984ecb30_JaffaCakes118.exe	20
PID 1756 wrote to memory of 1404	1756	f7273f12b5c8b90d33abc3fd984ecb30_JaffaCakes118.exe	20
PID 1756 wrote to memory of 1404	1756	f7273f12b5c8b90d33abc3fd984ecb30_JaffaCakes118.exe	20

memory/1404-2-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1404-5-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/1756-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1756-1-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/1756-14-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1756-15-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download