cf55100db137dbf028d729bd7ba9613364741dc01c5d3cd3e8b85e885d3b7129

Analysis

max time kernel
140s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
25/06/2024, 05:15

Target

0cbb247244c5abfd65d9e5ba8f3b4541_JaffaCakes118.exe
Size

423KB
MD5

0cbb247244c5abfd65d9e5ba8f3b4541
SHA1

4d7c2464cbc62eff67aff2c13d4d13e346bc3a15
SHA256

cf55100db137dbf028d729bd7ba9613364741dc01c5d3cd3e8b85e885d3b7129
SHA512

d662492809faecf1c14cfc50a7bf6e0267974e51a5cc131657846f4988b55c8cd1e1d9e2c4aadf91dd7cede524f920a5efcfc2442b89884f7a8f1ab70024cc8e
SSDEEP

12288:2A64JcUsdZy+H7sPMdJVNHThB1tmcyTvKN:2+oZuPMdJXz/1ox0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2088	2768	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2768 wrote to memory of 2088	2768	0cbb247244c5abfd65d9e5ba8f3b4541_JaffaCakes118.exe	28
PID 2768 wrote to memory of 2088	2768	0cbb247244c5abfd65d9e5ba8f3b4541_JaffaCakes118.exe	28
PID 2768 wrote to memory of 2088	2768	0cbb247244c5abfd65d9e5ba8f3b4541_JaffaCakes118.exe	28
PID 2768 wrote to memory of 2088	2768	0cbb247244c5abfd65d9e5ba8f3b4541_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\0cbb247244c5abfd65d9e5ba8f3b4541_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0cbb247244c5abfd65d9e5ba8f3b4541_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2768
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2768 -s 124
  2⤵
  - Program crash
  PID:2088

memory/2768-2-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2768-3-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2768-1-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2768-0-0x0000000000401000-0x0000000000403000-memory.dmp

Filesize
8KB

Download
memory/2768-6-0x0000000000401000-0x0000000000403000-memory.dmp

Filesize
8KB

Download