d3b9138b620139601041e436e3879fb7b08b5f812f91a04ac03ca50636e679fb

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 00:22

Target

1ed278964455c8ac3c202ed075b51ed3_JaffaCakes118.exe
Size

206KB
MD5

1ed278964455c8ac3c202ed075b51ed3
SHA1

bb69cbff24e1dda9108880a51df05ad552f3b17c
SHA256

d3b9138b620139601041e436e3879fb7b08b5f812f91a04ac03ca50636e679fb
SHA512

47631227f453bbaab29ac95e8e868224abebfc9a794390cd770f29de6e7464676dc3e9417fac6c9cdea887b745ec5d052edefe04c76c6b63274d037b543cc617
SSDEEP

3072:Igm+rjPBVfV8XOBoFAdj58j3HPO303voR7yQpEK6fXvke3y09iZe5S:Igm4NV21ydUXPO3W6yK6fsmqe

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2036	2032	WerFault.exe	28

Suspicious behavior: MapViewOfSection 2 IoCs

pid	Process
1392	1ed278964455c8ac3c202ed075b51ed3_JaffaCakes118.exe
1392	1ed278964455c8ac3c202ed075b51ed3_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1392 wrote to memory of 2032	1392	1ed278964455c8ac3c202ed075b51ed3_JaffaCakes118.exe	28
PID 1392 wrote to memory of 2032	1392	1ed278964455c8ac3c202ed075b51ed3_JaffaCakes118.exe	28
PID 1392 wrote to memory of 2032	1392	1ed278964455c8ac3c202ed075b51ed3_JaffaCakes118.exe	28
PID 1392 wrote to memory of 2032	1392	1ed278964455c8ac3c202ed075b51ed3_JaffaCakes118.exe	28
PID 1392 wrote to memory of 2032	1392	1ed278964455c8ac3c202ed075b51ed3_JaffaCakes118.exe	28
PID 1392 wrote to memory of 2032	1392	1ed278964455c8ac3c202ed075b51ed3_JaffaCakes118.exe	28
PID 1392 wrote to memory of 2032	1392	1ed278964455c8ac3c202ed075b51ed3_JaffaCakes118.exe	28
PID 2032 wrote to memory of 2036	2032	msiexec.exe	29
PID 2032 wrote to memory of 2036	2032	msiexec.exe	29
PID 2032 wrote to memory of 2036	2032	msiexec.exe	29
PID 2032 wrote to memory of 2036	2032	msiexec.exe	29

memory/2032-0-0x0000000000930000-0x0000000000944000-memory.dmp

Filesize
80KB

Download
memory/2032-1-0x0000000000930000-0x0000000000944000-memory.dmp

Filesize
80KB

Download
memory/2032-3-0x0000000000930000-0x0000000000944000-memory.dmp

Filesize
80KB

Download