31ce9fe417485d266ff2419f146b28046ec201d6bca8728e377660267c2629a2

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
04/07/2024, 19:27

Target

25fb98766389d37056c65b9dc19306e3_JaffaCakes118.exe
Size

28KB
MD5

25fb98766389d37056c65b9dc19306e3
SHA1

3e840fe91f3cf034a67389288e1f68fc193cf217
SHA256

31ce9fe417485d266ff2419f146b28046ec201d6bca8728e377660267c2629a2
SHA512

3ee7833f1bee5d6c38676b0f6c96aff5b5e3628b2d721100211057846e08a6c1a77e3faa8d7241b90f4932be62a27daaaa0760d83963095cc65d6c6dd2de81ff
SSDEEP

384:il6rm56YEGoS3/n7McjABxXKZgI15NcGHlaFKWmfy4XsJQjqxx5YK2SzBw0EE:fm56Kt7McjAYgITO4lNK4XsRr5YazBw

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2436	2220	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 2436	2220	25fb98766389d37056c65b9dc19306e3_JaffaCakes118.exe	28
PID 2220 wrote to memory of 2436	2220	25fb98766389d37056c65b9dc19306e3_JaffaCakes118.exe	28
PID 2220 wrote to memory of 2436	2220	25fb98766389d37056c65b9dc19306e3_JaffaCakes118.exe	28
PID 2220 wrote to memory of 2436	2220	25fb98766389d37056c65b9dc19306e3_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\25fb98766389d37056c65b9dc19306e3_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\25fb98766389d37056c65b9dc19306e3_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2220 -s 88
  2⤵
  - Program crash
  PID:2436

memory/2220-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download