06e72971a89acaf81a486921829515ffc065257c118c87083abe462da3cb48d5

Analysis

max time kernel
140s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15/05/2024, 23:42

Target

489a22d8b4b97f31b38304aaddd1e776_JaffaCakes118.exe
Size

1.0MB
MD5

489a22d8b4b97f31b38304aaddd1e776
SHA1

06c1b82b1db0c7999c0a47394bf4349435622a24
SHA256

06e72971a89acaf81a486921829515ffc065257c118c87083abe462da3cb48d5
SHA512

28d006e8d54fd073b7275c02070d3c70086243389593c2fa34a32d3864ca59781bbca49ac2fcff031d5562a1c1a850d79ec758edbed73e0cf682c8f10ae1ce53
SSDEEP

24576:CVKEIohMRSfw0RTQZjHKPjiqSMz9xLZ/JO5unIEj9WfzUa1:CVBMiwWTQZjHKPji/MxxcuI6Wfzz1

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4124	2384	WerFault.exe	91
432	2384	WerFault.exe	91

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2384 wrote to memory of 4124	2384	489a22d8b4b97f31b38304aaddd1e776_JaffaCakes118.exe	94
PID 2384 wrote to memory of 4124	2384	489a22d8b4b97f31b38304aaddd1e776_JaffaCakes118.exe	94
PID 2384 wrote to memory of 4124	2384	489a22d8b4b97f31b38304aaddd1e776_JaffaCakes118.exe	94

C:\Users\Admin\AppData\Local\Temp\489a22d8b4b97f31b38304aaddd1e776_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\489a22d8b4b97f31b38304aaddd1e776_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2384
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2384 -s 420
  2⤵
  - Program crash
  PID:4124
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2384 -s 420
  2⤵
  - Program crash
  PID:432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 2384 -ip 2384
1⤵
PID:2840

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1344 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:8
1⤵
PID:4212

memory/2384-0-0x0000000000C80000-0x0000000000D59000-memory.dmp

Filesize
868KB

Download
memory/2384-1-0x0000000000C80000-0x0000000000D59000-memory.dmp

Filesize
868KB

Download