02b5ee56d22cf2cf877797c50fd5b612742ee2c710fc888989ae532fe99396aa

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11/10/2024, 19:27

Target

3670757f6f9be32be99ae67cee4da71d_JaffaCakes118.exe
Size

2.5MB
MD5

3670757f6f9be32be99ae67cee4da71d
SHA1

7cc1729fa0d6457f92de44d28847877130ee8b5a
SHA256

02b5ee56d22cf2cf877797c50fd5b612742ee2c710fc888989ae532fe99396aa
SHA512

d157ba849b1510abe88cb76650bbb8335187d880a4dc7b353613f5504772844abcd52b3039aad1d0d3098ebb28ff3afc0448aa6ed96a0736d9e03a0d4ef739d7
SSDEEP

49152:g8hBYtvd6ZvB54Z2XGtruoEn/2JoMNotI2eOOV:g8od6t4Zjuuzetu

Score

1^/10

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
2484	3670757f6f9be32be99ae67cee4da71d_JaffaCakes118.exe
2484	3670757f6f9be32be99ae67cee4da71d_JaffaCakes118.exe
2484	3670757f6f9be32be99ae67cee4da71d_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2484 wrote to memory of 1208	2484	3670757f6f9be32be99ae67cee4da71d_JaffaCakes118.exe	21
PID 2484 wrote to memory of 1208	2484	3670757f6f9be32be99ae67cee4da71d_JaffaCakes118.exe	21
PID 2484 wrote to memory of 1208	2484	3670757f6f9be32be99ae67cee4da71d_JaffaCakes118.exe	21
PID 2484 wrote to memory of 1208	2484	3670757f6f9be32be99ae67cee4da71d_JaffaCakes118.exe	21
PID 2484 wrote to memory of 1208	2484	3670757f6f9be32be99ae67cee4da71d_JaffaCakes118.exe	21
PID 2484 wrote to memory of 1208	2484	3670757f6f9be32be99ae67cee4da71d_JaffaCakes118.exe	21

memory/1208-8-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1208-17-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2484-0-0x0000000000400000-0x0000000000B2A000-memory.dmp

Filesize
7.2MB

Download
memory/2484-1-0x0000000000BC0000-0x0000000000BC1000-memory.dmp

Filesize
4KB

Download
memory/2484-2-0x0000000002BD0000-0x0000000002CB9000-memory.dmp

Filesize
932KB

Download
memory/2484-3-0x00000000026C0000-0x00000000027D0000-memory.dmp

Filesize
1.1MB

Download
memory/2484-11-0x0000000000400000-0x0000000000B2A000-memory.dmp

Filesize
7.2MB

Download
memory/2484-12-0x0000000000400000-0x0000000000B2A000-memory.dmp

Filesize
7.2MB

Download
memory/2484-6-0x0000000000401000-0x0000000000408000-memory.dmp

Filesize
28KB

Download
memory/2484-13-0x0000000000400000-0x0000000000B2A000-memory.dmp

Filesize
7.2MB

Download
memory/2484-5-0x0000000004FF0000-0x0000000004FF2000-memory.dmp

Filesize
8KB

Download
memory/2484-30-0x0000000000400000-0x0000000000B2A000-memory.dmp

Filesize
7.2MB

Download