bbc0b5bcbf8e8f628d7901d33e1d665d8925a6c1dc81a5f73e7981de52d4a684

Analysis

max time kernel
141s
max time network
123s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
03-07-2024 12:04

Target

22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe
Size

49KB
MD5

22563b7a2c5753365fd3b82ea0ee60be
SHA1

655734bd4757e861c31fa18bc9e6d1ab6a09c8ed
SHA256

bbc0b5bcbf8e8f628d7901d33e1d665d8925a6c1dc81a5f73e7981de52d4a684
SHA512

db1519571426ad129653f9544dea263554bb739425ad5508074adad44353cd1ef9262968e1349c15315ffd7373491b5930aae3cd157e716bf65b8a870eead269
SSDEEP

1536:vf6/1rW7bX1dNc8xhT6/lwLEQuWynmRZeCN0vfv:vi/1rWvX1dNX69wLEQuFn6ACNWv

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2996 set thread context of 2072	2996	22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2052	2072	WerFault.exe	28

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2996 wrote to memory of 2072	2996	22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe	28
PID 2996 wrote to memory of 2072	2996	22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe	28
PID 2996 wrote to memory of 2072	2996	22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe	28
PID 2996 wrote to memory of 2072	2996	22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe	28
PID 2996 wrote to memory of 2072	2996	22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe	28
PID 2996 wrote to memory of 2072	2996	22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe	28
PID 2072 wrote to memory of 2052	2072	22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe	29
PID 2072 wrote to memory of 2052	2072	22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe	29
PID 2072 wrote to memory of 2052	2072	22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe	29
PID 2072 wrote to memory of 2052	2072	22563b7a2c5753365fd3b82ea0ee60be_JaffaCakes118.exe	29

memory/2072-4-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/2072-5-0x0000000000400000-0x000000000040E685-memory.dmp

Filesize
57KB

Download
memory/2072-6-0x0000000000400000-0x000000000040E685-memory.dmp

Filesize
57KB

Download
memory/2072-7-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/2072-2-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/2072-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download