69d5a1ef9fe150c4daa6d17317f7d07656234d14fd22355ed7c48414b92cf3ad

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
06/07/2024, 07:56

Target

27cfc6b564752b1107dde832082d3e6f_JaffaCakes118.exe
Size

262KB
MD5

27cfc6b564752b1107dde832082d3e6f
SHA1

8567c0e65044cb1c14c5e04117a5167a65d42b1d
SHA256

69d5a1ef9fe150c4daa6d17317f7d07656234d14fd22355ed7c48414b92cf3ad
SHA512

0bf11e356bfeb4c227859aad0529c5d795045ed5614a8f76cc4bd7c9713729b43455fe6e149087110a55183c1dfa7043636558703fe208f1a2e8bd2a8a863158
SSDEEP

6144:iZW+jCzl9JmURM8sgpkIhO0yi9zRFI86qJqlgLzh6JFqi2btI95b:WZjC59HsEkIkgRFvKK4JwZt4b

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3056	2252	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2252 wrote to memory of 3056	2252	27cfc6b564752b1107dde832082d3e6f_JaffaCakes118.exe	28
PID 2252 wrote to memory of 3056	2252	27cfc6b564752b1107dde832082d3e6f_JaffaCakes118.exe	28
PID 2252 wrote to memory of 3056	2252	27cfc6b564752b1107dde832082d3e6f_JaffaCakes118.exe	28
PID 2252 wrote to memory of 3056	2252	27cfc6b564752b1107dde832082d3e6f_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\27cfc6b564752b1107dde832082d3e6f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\27cfc6b564752b1107dde832082d3e6f_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2252
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2252 -s 44
  2⤵
  - Program crash
  PID:3056