d760fda9798042aadeee312268c1a9017847db33f0b07f8430207e6ebf0be639

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03/10/2024, 08:23

Target

0ec380c5318dc9fa581a5212d9f8a0df_JaffaCakes118.exe
Size

24.9MB
MD5

0ec380c5318dc9fa581a5212d9f8a0df
SHA1

896114b307709429350f924625084b402a882e7a
SHA256

d760fda9798042aadeee312268c1a9017847db33f0b07f8430207e6ebf0be639
SHA512

5b5b9028804a4387f11ae9dbc38ce0e8b5d0339935a2e8ef89f0a30054e137191aec7f47734de4a0426e7394373bb0387060510f23d8bc440790f0f98d88057a
SSDEEP

786432:yC1VvErULMufBZ4MKYQpAAOwv2mP6w1ezNw/:yC1tEgjfBmMKY9FXM6WeA

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2808	0ec380c5318dc9fa581a5212d9f8a0df_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 340 wrote to memory of 2808	340	0ec380c5318dc9fa581a5212d9f8a0df_JaffaCakes118.exe	30
PID 340 wrote to memory of 2808	340	0ec380c5318dc9fa581a5212d9f8a0df_JaffaCakes118.exe	30
PID 340 wrote to memory of 2808	340	0ec380c5318dc9fa581a5212d9f8a0df_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\0ec380c5318dc9fa581a5212d9f8a0df_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0ec380c5318dc9fa581a5212d9f8a0df_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:340
- C:\Users\Admin\AppData\Local\Temp\0ec380c5318dc9fa581a5212d9f8a0df_JaffaCakes118.exe
  "C:\Users\Admin\AppData\Local\Temp\0ec380c5318dc9fa581a5212d9f8a0df_JaffaCakes118.exe"
  2⤵
  - Loads dropped DLL
  PID:2808

C:\Users\Admin\AppData\Local\Temp\_MEI3402\python39.dll

Filesize
4.3MB

MD5
7e9d14aa762a46bb5ebac14fbaeaa238

SHA1
a5d90a7df9b90bdd8a84d7dc5066e4ea64ceb3d9

SHA256
e456ef44b261f895a01efb52d26c7a0c7d7d465b647a7b5592708ebf693f12a3

SHA512
280f16348df1c0953bbc6f37ff277485351171d0545ebe469bacd106d907917f87584154aec0f193f37322bc93ac5433cd9a5b5c7f47367176e5a8b19bbd5023

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI3402\wheel-0.37.0.dist-info\INSTALLER

Filesize
4B

MD5
365c9bfeb7d89244f2ce01c1de44cb85

SHA1
d7a03141d5d6b1e88b6b59ef08b6681df212c599

SHA256
ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508

SHA512
d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

Download Submit