f2f8f14f50a59f6bc81bbadd721d033d7852ddb303c17de5c68a299d071142f7

Analysis

max time kernel
141s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28-06-2024 12:09

Target

1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe
Size

566KB
MD5

1a0f79462186dfbd5ae910e132422816
SHA1

eadde1f3998c0dfa2338241d020686174df9d151
SHA256

f2f8f14f50a59f6bc81bbadd721d033d7852ddb303c17de5c68a299d071142f7
SHA512

72e8a5e7b2a7fa7a0634a49d39f406ca8acc4619374725b8fd64ae88c49c4b95a65d7330b0235a83ee29e776c8ff4cd5a6b09b8e8cb87c35d50b5bb9fe19b3f9
SSDEEP

12288:KLbg3zLNEz1s9z+RBZpuq8xBaanWbWZcLDqO8GW8kqOMFJkLjJ:Abgz+1Oz+RfpnYnQUcLDq9GW8JFJwt

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2408 set thread context of 2480	2408	1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2432	2480	WerFault.exe	28

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2408 wrote to memory of 2480	2408	1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe	28
PID 2408 wrote to memory of 2480	2408	1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe	28
PID 2408 wrote to memory of 2480	2408	1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe	28
PID 2408 wrote to memory of 2480	2408	1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe	28
PID 2408 wrote to memory of 2480	2408	1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe	28
PID 2408 wrote to memory of 2480	2408	1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe	28
PID 2480 wrote to memory of 2432	2480	1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe	29
PID 2480 wrote to memory of 2432	2480	1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe	29
PID 2480 wrote to memory of 2432	2480	1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe	29
PID 2480 wrote to memory of 2432	2480	1a0f79462186dfbd5ae910e132422816_JaffaCakes118.exe	29

memory/2480-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2480-2-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/2480-4-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download