93748de356e5556d2c469b979591769eb56d365ff49992f22eb08b3daf7dd0e2

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
12-06-2024 07:08

Target

9fd8c0c0f1f4ae506248931cc59004cb_JaffaCakes118.exe
Size

321KB
MD5

9fd8c0c0f1f4ae506248931cc59004cb
SHA1

936ad066366e96712ddf7bb3dcf36a8d092b1bb0
SHA256

93748de356e5556d2c469b979591769eb56d365ff49992f22eb08b3daf7dd0e2
SHA512

4bef8439812a0c3ebcc062e4605af7b5243dcee88a4b3008170178928ec76db811ce62a62cf3d89f3aaa1de4a6c5e5bdac6c5141cacad33285f695068347978c
SSDEEP

6144:OTj1OTEKnsub1upoH7td/tQqG56Prd3Z5NBA3r14lJDNIl:OFOoKnsub6oHprG5+3a7STY

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1792	2360	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 1792	2360	9fd8c0c0f1f4ae506248931cc59004cb_JaffaCakes118.exe	28
PID 2360 wrote to memory of 1792	2360	9fd8c0c0f1f4ae506248931cc59004cb_JaffaCakes118.exe	28
PID 2360 wrote to memory of 1792	2360	9fd8c0c0f1f4ae506248931cc59004cb_JaffaCakes118.exe	28
PID 2360 wrote to memory of 1792	2360	9fd8c0c0f1f4ae506248931cc59004cb_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\9fd8c0c0f1f4ae506248931cc59004cb_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\9fd8c0c0f1f4ae506248931cc59004cb_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2360 -s 116
  2⤵
  - Program crash
  PID:1792

memory/2360-0-0x0000000000A50000-0x0000000000AA5000-memory.dmp

Filesize
340KB

Download