74604195f0e740853ad14447f4847c750c10d6e93e6e25abcd040fb9280bea85

Analysis

max time kernel
15s
max time network
20s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
07/07/2024, 23:24

Target

2a27dcae0f3ebaf6c1c45bb2067a1530_JaffaCakes118.exe
Size

513KB
MD5

2a27dcae0f3ebaf6c1c45bb2067a1530
SHA1

9d8c0139482a9411b4cd738451e33be5b2206663
SHA256

74604195f0e740853ad14447f4847c750c10d6e93e6e25abcd040fb9280bea85
SHA512

10998754c2b79bab490a0bdb538857356b3e90f1119d6365162d1544136889c22053329d13ad4f4648290a2166c00a1b83184ed84aae787c84fcdbb0714def03
SSDEEP

12288:aT0/pY0TbWc+9aTMZF5nULEohodtz70ZkPQXj:k2CSbWtM4HdaEgItz70ZkoT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2232	2244	WerFault.exe	28

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2232	2244	2a27dcae0f3ebaf6c1c45bb2067a1530_JaffaCakes118.exe	29
PID 2244 wrote to memory of 2232	2244	2a27dcae0f3ebaf6c1c45bb2067a1530_JaffaCakes118.exe	29
PID 2244 wrote to memory of 2232	2244	2a27dcae0f3ebaf6c1c45bb2067a1530_JaffaCakes118.exe	29
PID 2244 wrote to memory of 2232	2244	2a27dcae0f3ebaf6c1c45bb2067a1530_JaffaCakes118.exe	29

C:\Users\Admin\AppData\Local\Temp\2a27dcae0f3ebaf6c1c45bb2067a1530_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2a27dcae0f3ebaf6c1c45bb2067a1530_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2244 -s 204
  2⤵
  - Program crash
  PID:2232