e4952f48737d4b094e81948347021b5854b5695d78357008221c3a153431993d

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
01/10/2024, 08:24

Target

05064b352415151e9d5276989b78f5ef_JaffaCakes118.exe
Size

113KB
MD5

05064b352415151e9d5276989b78f5ef
SHA1

cf6b6e2342e2799582a705ba06a553bc99674c22
SHA256

e4952f48737d4b094e81948347021b5854b5695d78357008221c3a153431993d
SHA512

6019e2d899f6d5057acac64427850c7695308d34080087eb81791502607dc3e6be6a92ee6b06591b21273adfefeeac178a3492f4e3200b025c613d22dad6ed93
SSDEEP

3072:GdI4RExK12ynQ7J26GeiIYv6rMpouAdWV/BlY257:Ge4eyQ7J2oiSrM2uAdWNP3

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3044	05064b352415151e9d5276989b78f5ef_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 3044 wrote to memory of 1192	3044	05064b352415151e9d5276989b78f5ef_JaffaCakes118.exe	21
PID 3044 wrote to memory of 1192	3044	05064b352415151e9d5276989b78f5ef_JaffaCakes118.exe	21
PID 3044 wrote to memory of 1192	3044	05064b352415151e9d5276989b78f5ef_JaffaCakes118.exe	21
PID 3044 wrote to memory of 1192	3044	05064b352415151e9d5276989b78f5ef_JaffaCakes118.exe	21
PID 3044 wrote to memory of 1192	3044	05064b352415151e9d5276989b78f5ef_JaffaCakes118.exe	21