10d5b87ca712f37ee567ec47cef40829994fc5fd9e928516679d2dfa43e5e781

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16-06-2024 20:35

Target

b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe
Size

714KB
MD5

b514e1ca810c72dd3a2695b96bd3c3e7
SHA1

e012e47c03a382650bfe622ca3366f179850a50b
SHA256

10d5b87ca712f37ee567ec47cef40829994fc5fd9e928516679d2dfa43e5e781
SHA512

c7144da2dba8fe928b424137a5e7dd9309cb11c2aa2167f8b52befc673135b21fccdc098ef34154561ce2cad5aa18a292da78825c4beb6c75fd7c6e82ba82419
SSDEEP

1536:cccvVn+/ylGTu/F1A60QXL2bYC/DwWdMkVQq8Yuv0/kbqIzxd:S+KxY60QU/x+OQq8Yuv0/kOUz

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1260	912	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 912 wrote to memory of 1260	912	b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe	28
PID 912 wrote to memory of 1260	912	b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe	28
PID 912 wrote to memory of 1260	912	b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe	28
PID 912 wrote to memory of 1260	912	b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:912
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 912 -s 36
  2⤵
  - Program crash
  PID:1260