2df0b05f1275796cded598bae2a76f3669d37b66b03c447f0caa89461fa4f38d

Analysis

max time kernel
140s
max time network
127s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
25/06/2024, 00:33

Target

0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe
Size

160KB
MD5

0b8bd16d2613f750c88d6a65d345e29a
SHA1

777bb055687df958ddf40f8391734392b2e25cee
SHA256

2df0b05f1275796cded598bae2a76f3669d37b66b03c447f0caa89461fa4f38d
SHA512

aeac0ffa004356f078bf763f14a7a1c643b2d0a1c60a2f0fe775e35c277c237adf379c749c68bdbf2c1f97af1adb335ed549dc90c03221bdabcdfaf5563142f1
SSDEEP

3072:9VjuO8EfwWkrhD4krhD5rjBkB6J28ZkYuZxaZO:zuTE76D46D1juYuZiO

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1928 set thread context of 2028	1928	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3008	2028	WerFault.exe	28

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1928	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1928 wrote to memory of 2028	1928	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	28
PID 1928 wrote to memory of 2028	1928	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	28
PID 1928 wrote to memory of 2028	1928	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	28
PID 1928 wrote to memory of 2028	1928	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	28
PID 1928 wrote to memory of 2028	1928	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	28
PID 1928 wrote to memory of 2028	1928	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	28
PID 1928 wrote to memory of 2028	1928	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	28
PID 1928 wrote to memory of 2028	1928	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	28
PID 2028 wrote to memory of 3008	2028	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	29
PID 2028 wrote to memory of 3008	2028	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	29
PID 2028 wrote to memory of 3008	2028	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	29
PID 2028 wrote to memory of 3008	2028	0b8bd16d2613f750c88d6a65d345e29a_JaffaCakes118.exe	29

memory/1928-1-0x0000000000400000-0x000000000045F000-memory.dmp

Filesize
380KB

Download
memory/1928-2-0x0000000000400000-0x000000000045F000-memory.dmp

Filesize
380KB

Download
memory/1928-0-0x0000000000400000-0x000000000045F000-memory.dmp

Filesize
380KB

Download
memory/1928-3-0x0000000000401000-0x0000000000415000-memory.dmp

Filesize
80KB

Download
memory/1928-18-0x0000000000400000-0x000000000045F000-memory.dmp

Filesize
380KB

Download
memory/1928-20-0x0000000000401000-0x0000000000415000-memory.dmp

Filesize
80KB

Download
memory/2028-10-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2028-12-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2028-8-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2028-19-0x0000000000400000-0x0000000000402200-memory.dmp

Filesize
8KB

Download
memory/2028-6-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2028-17-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2028-14-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2028-15-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download