de6190757c5059941ddacb3e1488edfbe1c1f1ea58c90a2c2a33934e2f7d4029

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
17-04-2024 06:55

Target

f53a226e952208914d407545ca96dfde_JaffaCakes118.exe
Size

80KB
MD5

f53a226e952208914d407545ca96dfde
SHA1

1b0f1b291ff1fc98f57129afb6f5cc85b16a7fba
SHA256

de6190757c5059941ddacb3e1488edfbe1c1f1ea58c90a2c2a33934e2f7d4029
SHA512

4f165f4e0fe80d73e99a86c3ff2230f741818a8ee351eb48eda4c0a3dab133f0ba3f398a91cafe28ed7eeaedc1c68ae7025f5778d08b2f341624c8e187f111cb
SSDEEP

1536:w7qbQ/12M4fdpdBy6gUA36tuN7zmcNfag7QdxOwr6:7G12rq6ZA36tuhyCyg7q7O

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2252 set thread context of 2836	2252	f53a226e952208914d407545ca96dfde_JaffaCakes118.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2516	2836	WerFault.exe	28

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2252 wrote to memory of 2836	2252	f53a226e952208914d407545ca96dfde_JaffaCakes118.exe	28
PID 2252 wrote to memory of 2836	2252	f53a226e952208914d407545ca96dfde_JaffaCakes118.exe	28
PID 2252 wrote to memory of 2836	2252	f53a226e952208914d407545ca96dfde_JaffaCakes118.exe	28
PID 2252 wrote to memory of 2836	2252	f53a226e952208914d407545ca96dfde_JaffaCakes118.exe	28
PID 2252 wrote to memory of 2836	2252	f53a226e952208914d407545ca96dfde_JaffaCakes118.exe	28
PID 2252 wrote to memory of 2836	2252	f53a226e952208914d407545ca96dfde_JaffaCakes118.exe	28
PID 2836 wrote to memory of 2516	2836	f53a226e952208914d407545ca96dfde_JaffaCakes118.exe	29
PID 2836 wrote to memory of 2516	2836	f53a226e952208914d407545ca96dfde_JaffaCakes118.exe	29
PID 2836 wrote to memory of 2516	2836	f53a226e952208914d407545ca96dfde_JaffaCakes118.exe	29
PID 2836 wrote to memory of 2516	2836	f53a226e952208914d407545ca96dfde_JaffaCakes118.exe	29

memory/2252-4-0x0000000000010000-0x000000000002F000-memory.dmp

Filesize
124KB

Download
memory/2836-0-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2836-1-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2836-3-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2836-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2836-7-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2836-8-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download