9400089d3f5ee42f4fce6ea7867f1cbd5b51dced1b607aee9edf165bd89fbe28

Analysis

max time kernel
141s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
03-07-2024 03:43

Target

20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe
Size

124KB
MD5

20f7f338e1df903ff83fc39cf30ea408
SHA1

69d73f8bac6e27c5514339822f353f88a40f3d61
SHA256

9400089d3f5ee42f4fce6ea7867f1cbd5b51dced1b607aee9edf165bd89fbe28
SHA512

48f1473f65f6d17a91ea850ee46fc39ecb073052885b09c00977fbc43f638eb23c7027f14a6367a865b80fa9dd2c187d5efb154ab84be0cbf91ccc0a1acb9b71
SSDEEP

3072:IBgBPYvMIlauXlP5WDfx4PHVpYjdwYGf5:IBgBP/uWDf+PIyYGB

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1692 set thread context of 2136	1692	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2524	2136	WerFault.exe	28

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 1692 wrote to memory of 2136	1692	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	28
PID 1692 wrote to memory of 2136	1692	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	28
PID 1692 wrote to memory of 2136	1692	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	28
PID 1692 wrote to memory of 2136	1692	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	28
PID 1692 wrote to memory of 2136	1692	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	28
PID 1692 wrote to memory of 2136	1692	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	28
PID 1692 wrote to memory of 2136	1692	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	28
PID 1692 wrote to memory of 2136	1692	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	28
PID 1692 wrote to memory of 2136	1692	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	28
PID 2136 wrote to memory of 2524	2136	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	29
PID 2136 wrote to memory of 2524	2136	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	29
PID 2136 wrote to memory of 2524	2136	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	29
PID 2136 wrote to memory of 2524	2136	20f7f338e1df903ff83fc39cf30ea408_JaffaCakes118.exe	29

memory/1692-0-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download
memory/1692-13-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download
memory/2136-1-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2136-9-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2136-7-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2136-5-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2136-3-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2136-11-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2136-14-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2136-15-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download