cdb00e3dd280c42212f977100c3fdefe7c843677a1da4b21bbba91c175dbf205

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
04/07/2024, 21:35

Target

264beaefb04101eb68f762913cd9f14b_JaffaCakes118.exe
Size

357KB
MD5

264beaefb04101eb68f762913cd9f14b
SHA1

7a82646d27d59b565a85eb5784b291a81e37b637
SHA256

cdb00e3dd280c42212f977100c3fdefe7c843677a1da4b21bbba91c175dbf205
SHA512

1a17554a51afad83b151e14937869d253c36495799bfb442b8282fa845e9c08846880fd0f1dc7e9e286728aeef8d6bdd118ba74f23f8edb0d9b82e356285d76e
SSDEEP

6144:WdcbeoXpsItIo7/3LdI19yQxXUvazU1yDwnuDS1GqHTR2:2jWpDtI48yk7myIuSHT0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3064	3040	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3040 wrote to memory of 3064	3040	264beaefb04101eb68f762913cd9f14b_JaffaCakes118.exe	28
PID 3040 wrote to memory of 3064	3040	264beaefb04101eb68f762913cd9f14b_JaffaCakes118.exe	28
PID 3040 wrote to memory of 3064	3040	264beaefb04101eb68f762913cd9f14b_JaffaCakes118.exe	28
PID 3040 wrote to memory of 3064	3040	264beaefb04101eb68f762913cd9f14b_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\264beaefb04101eb68f762913cd9f14b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\264beaefb04101eb68f762913cd9f14b_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3040 -s 184
  2⤵
  - Program crash
  PID:3064

memory/3040-0-0x0000000010000000-0x00000000101115D4-memory.dmp

Filesize
1.1MB

Download
memory/3040-4-0x0000000010000000-0x00000000101115D4-memory.dmp

Filesize
1.1MB

Download
memory/3040-5-0x0000000010001000-0x000000001009A000-memory.dmp

Filesize
612KB

Download
memory/3040-1-0x0000000010000000-0x00000000101115D4-memory.dmp

Filesize
1.1MB

Download
memory/3040-7-0x0000000010000000-0x00000000101115D4-memory.dmp

Filesize
1.1MB

Download
memory/3040-6-0x0000000010000000-0x00000000101115D4-memory.dmp

Filesize
1.1MB

Download
memory/3040-8-0x0000000010000000-0x00000000101115D4-memory.dmp

Filesize
1.1MB

Download