cab13cec2abc8419bdf918c14f483f23b51b95bdc39185436318b5b4959b9ba6

Analysis

max time kernel
140s
max time network
123s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
08-07-2024 03:39

Target

2adae0a577c85a86623f3ba7b64f1df9_JaffaCakes118.exe
Size

345KB
MD5

2adae0a577c85a86623f3ba7b64f1df9
SHA1

5ab2dea0ca031f0ebaa070c6fbffb55497fea435
SHA256

cab13cec2abc8419bdf918c14f483f23b51b95bdc39185436318b5b4959b9ba6
SHA512

c1fce8b8881b467e48adce90548be937272d3e8e7f42bbe16ed15a33adfe7865fde33cf6fcd0c132fd7ac580c57bd18042657d5274863849d66a110d8df09fbb
SSDEEP

6144:DD1TsCHwtdOt+VaI7ztYx1/YnZCSc72aqGLPrRySHh/h11xX+neM6cb:DR4CQtot+VNZYxxyHcKfGLPr8SHh/lxG

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2960	2776	WerFault.exe	30

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2776 wrote to memory of 2960	2776	2adae0a577c85a86623f3ba7b64f1df9_JaffaCakes118.exe	31
PID 2776 wrote to memory of 2960	2776	2adae0a577c85a86623f3ba7b64f1df9_JaffaCakes118.exe	31
PID 2776 wrote to memory of 2960	2776	2adae0a577c85a86623f3ba7b64f1df9_JaffaCakes118.exe	31
PID 2776 wrote to memory of 2960	2776	2adae0a577c85a86623f3ba7b64f1df9_JaffaCakes118.exe	31

C:\Users\Admin\AppData\Local\Temp\2adae0a577c85a86623f3ba7b64f1df9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2adae0a577c85a86623f3ba7b64f1df9_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2776
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2776 -s 184
  2⤵
  - Program crash
  PID:2960

memory/2776-0-0x0000000000400000-0x00000000004B6000-memory.dmp

Filesize
728KB

Download
memory/2776-1-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/2776-2-0x0000000000390000-0x0000000000391000-memory.dmp

Filesize
4KB

Download
memory/2776-3-0x0000000000400000-0x00000000004B6000-memory.dmp

Filesize
728KB

Download
memory/2776-5-0x0000000000390000-0x0000000000391000-memory.dmp

Filesize
4KB

Download