293621b8224e09b75636aa57e41329bd5def40d6702e59ecda11171fb14676b9

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
12/05/2024, 01:58

Target

37a8642fe9baefbb0183447c64800b47_JaffaCakes118.dll
Size

5.1MB
MD5

37a8642fe9baefbb0183447c64800b47
SHA1

1041bd21f4799fae055c3cd438087713b5b2ef1a
SHA256

293621b8224e09b75636aa57e41329bd5def40d6702e59ecda11171fb14676b9
SHA512

ee4ce68ee7fd53d8168de723721f4ba9fdd6a92c555e519a909a89106c130ef43b17f95d9d65710c5deb84bc5eeac3ffc3e0fb127b5c26bf7233c275fc35873c
SSDEEP

98304:2GQYwvFmz5Y3XMgK6tHvIxYLGUkh4j5dDCFWIqWpWiNohOuY0k+ZtXBJZW6n/:D1wr3XXK6NKUkUKFWIqjtV/tXBJZW6n/

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2096	3056	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2836 wrote to memory of 3056	2836	rundll32.exe	28
PID 2836 wrote to memory of 3056	2836	rundll32.exe	28
PID 2836 wrote to memory of 3056	2836	rundll32.exe	28
PID 2836 wrote to memory of 3056	2836	rundll32.exe	28
PID 2836 wrote to memory of 3056	2836	rundll32.exe	28
PID 2836 wrote to memory of 3056	2836	rundll32.exe	28
PID 2836 wrote to memory of 3056	2836	rundll32.exe	28
PID 3056 wrote to memory of 2096	3056	rundll32.exe	29
PID 3056 wrote to memory of 2096	3056	rundll32.exe	29
PID 3056 wrote to memory of 2096	3056	rundll32.exe	29
PID 3056 wrote to memory of 2096	3056	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\37a8642fe9baefbb0183447c64800b47_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2836
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\37a8642fe9baefbb0183447c64800b47_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3056
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 3056 -s 260
    3⤵
    - Program crash
    PID:2096