98a98797760165f7893c6ed7cbc81c64b95a2098a39782dfa01d03a00fbb2d66

Analysis

max time kernel
147s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25-06-2024 18:41

Target

0f2100b0753f77d834dfa7ca63cec0fe_JaffaCakes118.exe
Size

115KB
MD5

0f2100b0753f77d834dfa7ca63cec0fe
SHA1

d5b4e13bdcfd88e2ea6766ebca30d3a24162ff7e
SHA256

98a98797760165f7893c6ed7cbc81c64b95a2098a39782dfa01d03a00fbb2d66
SHA512

fa7b936e3a9d79986f8747f37ebd607234a197743ae1da83039560cb05a7380c6458548f9f74d8bedf8c26b9a91a24b32630876c19add7801bdcab71c16139e8
SSDEEP

3072:vKISBrXeFm1KiWG/2lJ7cm7lz6Fx/PiV7GVv4TT:vzKeogu/2XPpeiVqVU

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4408 set thread context of 2632	4408	0f2100b0753f77d834dfa7ca63cec0fe_JaffaCakes118.exe	80

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3860	2632	WerFault.exe	80

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 4408 wrote to memory of 2632	4408	0f2100b0753f77d834dfa7ca63cec0fe_JaffaCakes118.exe	80
PID 4408 wrote to memory of 2632	4408	0f2100b0753f77d834dfa7ca63cec0fe_JaffaCakes118.exe	80
PID 4408 wrote to memory of 2632	4408	0f2100b0753f77d834dfa7ca63cec0fe_JaffaCakes118.exe	80
PID 4408 wrote to memory of 2632	4408	0f2100b0753f77d834dfa7ca63cec0fe_JaffaCakes118.exe	80
PID 4408 wrote to memory of 2632	4408	0f2100b0753f77d834dfa7ca63cec0fe_JaffaCakes118.exe	80
PID 4408 wrote to memory of 2632	4408	0f2100b0753f77d834dfa7ca63cec0fe_JaffaCakes118.exe	80
PID 4408 wrote to memory of 2632	4408	0f2100b0753f77d834dfa7ca63cec0fe_JaffaCakes118.exe	80

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 2632 -ip 2632
1⤵
PID:1688

memory/2632-3-0x0000000000400000-0x0000000000402000-memory.dmp

Filesize
8KB

Download
memory/2632-2-0x0000000000400000-0x0000000000402000-memory.dmp

Filesize
8KB

Download
memory/2632-7-0x0000000000400000-0x0000000000402000-memory.dmp

Filesize
8KB

Download
memory/2632-11-0x0000000000400000-0x0000000000401E00-memory.dmp

Filesize
7KB

Download
memory/4408-0-0x0000000000400000-0x000000000079A000-memory.dmp

Filesize
3.6MB

Download
memory/4408-1-0x00000000026B0000-0x00000000027A0000-memory.dmp

Filesize
960KB

Download
memory/4408-9-0x00000000026B0000-0x00000000027A0000-memory.dmp

Filesize
960KB

Download
memory/4408-8-0x0000000000400000-0x000000000079A000-memory.dmp

Filesize
3.6MB

Download