7f931cfcca6053df66c53799fd4161fd14d31ed5a31eaca0cbcb17891bb42a3b

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
15/10/2024, 01:28

Target

45271964bb68c1b80b56736ed19cc888_JaffaCakes118.exe
Size

138KB
MD5

45271964bb68c1b80b56736ed19cc888
SHA1

b293d43e67c4bb6008ea02f5fbf58b8fe2df59d2
SHA256

7f931cfcca6053df66c53799fd4161fd14d31ed5a31eaca0cbcb17891bb42a3b
SHA512

e4058e88e28d055be76e33f3b99d8cc1bb3e1de6261a2246f7134e8c78f56bd58ccd7cbf3bdd8330ca1d0017d8772c57767a01c9e5da3cded9203bc029f22245
SSDEEP

3072:XZm/SVJa7n/VdpMmusBY1uMng1R7uV9FBnUxuJrTdkzGn0+AGGPY/T:XZm2Q/VdcsYa1R7+FxUxuKG0hDPe

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2300	45271964bb68c1b80b56736ed19cc888_JaffaCakes118.exe
2300	45271964bb68c1b80b56736ed19cc888_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 1208	2300	45271964bb68c1b80b56736ed19cc888_JaffaCakes118.exe	21
PID 2300 wrote to memory of 1208	2300	45271964bb68c1b80b56736ed19cc888_JaffaCakes118.exe	21
PID 2300 wrote to memory of 1208	2300	45271964bb68c1b80b56736ed19cc888_JaffaCakes118.exe	21
PID 2300 wrote to memory of 1208	2300	45271964bb68c1b80b56736ed19cc888_JaffaCakes118.exe	21
PID 2300 wrote to memory of 1208	2300	45271964bb68c1b80b56736ed19cc888_JaffaCakes118.exe	21

memory/2300-0-0x0000000000400000-0x0000000000430000-memory.dmp

Filesize
192KB

Download
memory/2300-1-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2300-2-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2300-4-0x0000000000400000-0x0000000000430000-memory.dmp

Filesize
192KB

Download
memory/2300-5-0x0000000000400000-0x0000000000430000-memory.dmp

Filesize
192KB

Download