c9276a78a7dfb0c9dd3f5c19c5da3c965e0e63ab9c02b6192edb2c7dc21e7b9d

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14-06-2024 22:17

Target

abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118.exe
Size

447KB
MD5

abb7d2d64ee38fb8fb9b0191126a280c
SHA1

c586ef2a76ce32d55cf213e56e377f05d8b0ab51
SHA256

c9276a78a7dfb0c9dd3f5c19c5da3c965e0e63ab9c02b6192edb2c7dc21e7b9d
SHA512

ee3d20c9db57e02d1c1ad28c960334991acf2cadb395d7de35f847c93a6f5ddb1006c929c87c7d277756c82f97efb026fbd55062cd5340ef250f10fe0211d91c
SSDEEP

12288:kywn9vaSJgiwiKzHrIbXTpLFiYhI04kMTJ:9eKIDTpLFiYO04kM1

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1216	2044	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2044 wrote to memory of 1216	2044	abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118.exe	28
PID 2044 wrote to memory of 1216	2044	abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118.exe	28
PID 2044 wrote to memory of 1216	2044	abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118.exe	28
PID 2044 wrote to memory of 1216	2044	abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2044
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2044 -s 7076
  2⤵
  - Program crash
  PID:1216

memory/2044-0-0x0000000074A3E000-0x0000000074A3F000-memory.dmp

Filesize
4KB

Download
memory/2044-1-0x00000000011B0000-0x0000000001226000-memory.dmp

Filesize
472KB

Download
memory/2044-2-0x0000000000460000-0x0000000000498000-memory.dmp

Filesize
224KB

Download
memory/2044-4-0x00000000004E0000-0x0000000000518000-memory.dmp

Filesize
224KB

Download
memory/2044-3-0x0000000074A30000-0x000000007511E000-memory.dmp

Filesize
6.9MB

Download
memory/2044-5-0x0000000074A30000-0x000000007511E000-memory.dmp

Filesize
6.9MB

Download
memory/2044-6-0x0000000074A3E000-0x0000000074A3F000-memory.dmp

Filesize
4KB

Download
memory/2044-7-0x0000000074A30000-0x000000007511E000-memory.dmp

Filesize
6.9MB

Download