8dfed6f9a0c36172af285e00b7d9bc6724079d9d4c5c68c192131b3170123036

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
06/07/2024, 09:54

Target

28202411776271a8ff34a38541443ce2_JaffaCakes118.exe
Size

45KB
MD5

28202411776271a8ff34a38541443ce2
SHA1

abcfe2d322716e5914ecdedf81078a10924c72d8
SHA256

8dfed6f9a0c36172af285e00b7d9bc6724079d9d4c5c68c192131b3170123036
SHA512

ada3fead0812cd0b62f526248c51e382834a24dc764ab53a8cdf19f19382941bb727d08713706e8a6e7526a7be28d88deac18bc9e7e1f8b58ecaebff6c79a675
SSDEEP

768:9msjqWqdaekpiHMgqfGmGUVVQ6krGhWIjhZQSGHe5fpkXOA4LXDD7mbC:95SHsf5VC/rGhJjcSGpWXDD7r

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2260	2232	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 2260	2232	28202411776271a8ff34a38541443ce2_JaffaCakes118.exe	28
PID 2232 wrote to memory of 2260	2232	28202411776271a8ff34a38541443ce2_JaffaCakes118.exe	28
PID 2232 wrote to memory of 2260	2232	28202411776271a8ff34a38541443ce2_JaffaCakes118.exe	28
PID 2232 wrote to memory of 2260	2232	28202411776271a8ff34a38541443ce2_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\28202411776271a8ff34a38541443ce2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\28202411776271a8ff34a38541443ce2_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2232 -s 136
  2⤵
  - Program crash
  PID:2260