793629dc5e8ed4d48241b163a33bceea3f36743a96983251020ce7f221d0e829

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
16-06-2024 14:50

Target

b4132ab4ec04cd6b223c9ff7de5100e2_JaffaCakes118.exe
Size

340KB
MD5

b4132ab4ec04cd6b223c9ff7de5100e2
SHA1

b48cdfc6c07f02bdc09b797e3e918b7dc51bd66b
SHA256

793629dc5e8ed4d48241b163a33bceea3f36743a96983251020ce7f221d0e829
SHA512

fcf357baca0825e5ae25fe864c3e3e2772aab86e1ae4208459f31b441d66a28f01b73c9eedb10ec530f7f06362716b3615568bf746395377daff3c6c49b7d539
SSDEEP

6144:/PvbOjOHvxOzhG+KcE9+nzuZOfe85Ualy:/PvbOmUNG+P2+z22em

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2204	1648	WerFault.exe	27

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1648	b4132ab4ec04cd6b223c9ff7de5100e2_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1648 wrote to memory of 2204	1648	b4132ab4ec04cd6b223c9ff7de5100e2_JaffaCakes118.exe	28
PID 1648 wrote to memory of 2204	1648	b4132ab4ec04cd6b223c9ff7de5100e2_JaffaCakes118.exe	28
PID 1648 wrote to memory of 2204	1648	b4132ab4ec04cd6b223c9ff7de5100e2_JaffaCakes118.exe	28
PID 1648 wrote to memory of 2204	1648	b4132ab4ec04cd6b223c9ff7de5100e2_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\b4132ab4ec04cd6b223c9ff7de5100e2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b4132ab4ec04cd6b223c9ff7de5100e2_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1648
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1648 -s 552
  2⤵
  - Program crash
  PID:2204

memory/1648-0-0x000000007473E000-0x000000007473F000-memory.dmp

Filesize
4KB

Download
memory/1648-1-0x00000000013A0000-0x00000000013FA000-memory.dmp

Filesize
360KB

Download
memory/1648-2-0x000000007473E000-0x000000007473F000-memory.dmp

Filesize
4KB

Download