76c25b7f488886d57b17b381263ffbb9368be0b7aca12ef45a5a511e2cd10346

Analysis

max time kernel
20s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
06/07/2024, 05:21

Target

2761659ecdd96f91f7918fe79429238b_JaffaCakes118.exe
Size

100KB
MD5

2761659ecdd96f91f7918fe79429238b
SHA1

beab7537c807a01f67064ccee5d655de5be7cea8
SHA256

76c25b7f488886d57b17b381263ffbb9368be0b7aca12ef45a5a511e2cd10346
SHA512

116c8a47079622f7eb1c185892093beb9fd5a72a97642d98979e2fd2cf4c8693ff7fe876940ff9b22b2f3fba3b38bb0f7917b866bb45631505d83238fe3c2867
SSDEEP

1536:iFxidJzaC4YKE85SR5n6ae8vTYf1FmzxYzCZqQAhj+AZy0rdLNQIOZbZTFXKfHW2:aQIMKEVZYPFGYmF85QzZblxKf04

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2428	2360	WerFault.exe	29

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2360	2761659ecdd96f91f7918fe79429238b_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2428	2360	2761659ecdd96f91f7918fe79429238b_JaffaCakes118.exe	30
PID 2360 wrote to memory of 2428	2360	2761659ecdd96f91f7918fe79429238b_JaffaCakes118.exe	30
PID 2360 wrote to memory of 2428	2360	2761659ecdd96f91f7918fe79429238b_JaffaCakes118.exe	30
PID 2360 wrote to memory of 2428	2360	2761659ecdd96f91f7918fe79429238b_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\2761659ecdd96f91f7918fe79429238b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2761659ecdd96f91f7918fe79429238b_JaffaCakes118.exe"
1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2360 -s 128
  2⤵
  - Program crash
  PID:2428

memory/2360-0-0x0000000000401000-0x000000000040B000-memory.dmp

Filesize
40KB

Download
memory/2360-1-0x0000000000220000-0x0000000000224000-memory.dmp

Filesize
16KB

Download
memory/2360-2-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2360-4-0x0000000000230000-0x0000000000242000-memory.dmp

Filesize
72KB

Download
memory/2360-3-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2360-5-0x0000000000401000-0x000000000040B000-memory.dmp

Filesize
40KB

Download