4253eff421baf0af64fbb860740220d39ba311e8e6af54f8ccc33d9fc2be1418

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
27/06/2024, 12:29

Target

1602e1aa4101ed6c9db70d285ab42bc5_JaffaCakes118.exe
Size

385KB
MD5

1602e1aa4101ed6c9db70d285ab42bc5
SHA1

0a82e4387a5ea827e4cfa4be2c87d9554e4bcc2e
SHA256

4253eff421baf0af64fbb860740220d39ba311e8e6af54f8ccc33d9fc2be1418
SHA512

d38abfcd1e24b07bd8a515f1f90c675fa911f7bb5d6ea0e8f89311086bd9ef423ac0189e0f50e1d7dc48a67f85ef1ec309f900526c0fa2a2d17a93dfbade63c8
SSDEEP

12288:7XXXn4FQTQxCiUulszdP1dLq7SaRvYi8hGVc3Ke:zfEszdPWJV8EVcae

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2032	1992	WerFault.exe	27

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
1992	1602e1aa4101ed6c9db70d285ab42bc5_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1992 wrote to memory of 2032	1992	1602e1aa4101ed6c9db70d285ab42bc5_JaffaCakes118.exe	28
PID 1992 wrote to memory of 2032	1992	1602e1aa4101ed6c9db70d285ab42bc5_JaffaCakes118.exe	28
PID 1992 wrote to memory of 2032	1992	1602e1aa4101ed6c9db70d285ab42bc5_JaffaCakes118.exe	28
PID 1992 wrote to memory of 2032	1992	1602e1aa4101ed6c9db70d285ab42bc5_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\1602e1aa4101ed6c9db70d285ab42bc5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1602e1aa4101ed6c9db70d285ab42bc5_JaffaCakes118.exe"
1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
PID:1992
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1992 -s 96
  2⤵
  - Program crash
  PID:2032

memory/1992-0-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/1992-1-0x0000000001C40000-0x0000000001C77000-memory.dmp

Filesize
220KB

Download
memory/1992-2-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/1992-3-0x0000000000170000-0x0000000000181000-memory.dmp

Filesize
68KB

Download
memory/1992-4-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/1992-5-0x0000000000170000-0x0000000000181000-memory.dmp

Filesize
68KB

Download