af7f40724e5ae521bbef2d9684e8f1952898127591f5684c7a6c71d079e3bbbb

Analysis

max time kernel
141s
max time network
123s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
19/06/2024, 23:54

Target

014a228b41e2273ff31abacbc4ac2ec1_JaffaCakes118.exe
Size

293KB
MD5

014a228b41e2273ff31abacbc4ac2ec1
SHA1

d3b27088f46bbf1109f2e992b88afa06c94f4bd0
SHA256

af7f40724e5ae521bbef2d9684e8f1952898127591f5684c7a6c71d079e3bbbb
SHA512

f5cfb03abbe5728b28bccff997a09ad01572893e201382fac9132e0e85b8d0b559feaa11879234f42efff30af50c657ec52282db5aa46c311bb6c092ca062313
SSDEEP

6144:4GVHH2lgB+pbUO+e/jMbuFQ9vALG7oJG+goJS+qJvTT1cACTfgjdnA:pVH+o+psS+v96ko1SNX1kfgjdnA

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2788	2236	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 2788	2236	014a228b41e2273ff31abacbc4ac2ec1_JaffaCakes118.exe	28
PID 2236 wrote to memory of 2788	2236	014a228b41e2273ff31abacbc4ac2ec1_JaffaCakes118.exe	28
PID 2236 wrote to memory of 2788	2236	014a228b41e2273ff31abacbc4ac2ec1_JaffaCakes118.exe	28
PID 2236 wrote to memory of 2788	2236	014a228b41e2273ff31abacbc4ac2ec1_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\014a228b41e2273ff31abacbc4ac2ec1_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\014a228b41e2273ff31abacbc4ac2ec1_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2236 -s 152
  2⤵
  - Program crash
  PID:2788

memory/2236-0-0x0000000000400000-0x00000000004A2000-memory.dmp

Filesize
648KB

Download
memory/2236-1-0x0000000000400000-0x00000000004A2000-memory.dmp

Filesize
648KB

Download