9419780e88814f704ee06e50d66ac65b9745baaa926499a559e424ab242b3060

Analysis

max time kernel
125s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
06/07/2024, 00:44

Target

273db1f882dde141b55a73426302163b_JaffaCakes118.dll
Size

73KB
MD5

273db1f882dde141b55a73426302163b
SHA1

e6e483cf8104704c8cee66dfbe6bca3c86874c27
SHA256

9419780e88814f704ee06e50d66ac65b9745baaa926499a559e424ab242b3060
SHA512

64a7ddcac97ad75da2c588030f839490d5bac45994ceb8869787fda30910914b302e94fe600a4cd8520d673252a31a227494877244e42715ee9d70df14df4863
SSDEEP

1536:4BFyIskGZ4/rdXFZSN7V/sSo0GsN7ClwqM2pWIHcvI89wTFZD:BToXF8ZdNGsN7mG258geCFd

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
644	4516	WerFault.exe	89

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1888 wrote to memory of 4516	1888	rundll32.exe	89
PID 1888 wrote to memory of 4516	1888	rundll32.exe	89
PID 1888 wrote to memory of 4516	1888	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\273db1f882dde141b55a73426302163b_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1888
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\273db1f882dde141b55a73426302163b_JaffaCakes118.dll,#1
  2⤵
  PID:4516
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 4516 -s 548
    3⤵
    - Program crash
    PID:644

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4516 -ip 4516
1⤵
PID:3588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4280,i,384704133665252524,7723904513810765818,262144 --variations-seed-version --mojo-platform-channel-handle=4100 /prefetch:8
1⤵
PID:992

memory/4516-0-0x0000000010000000-0x0000000010041000-memory.dmp

Filesize
260KB

Download