7b675b09cec22d06739b2ba36b27d545f4aa44f0c86626abba5f7180ad172a23

Analysis

max time kernel
140s
max time network
127s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
08/07/2024, 14:42

Target

2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe
Size

25KB
MD5

2cbad5d39c52129484d086780c3c4a8f
SHA1

f1e590020f43a3de3c264a09316ee9696271f166
SHA256

7b675b09cec22d06739b2ba36b27d545f4aa44f0c86626abba5f7180ad172a23
SHA512

aca9de7fd72ed726600e8b48d309a3fd53f350b51893a06e3316a39cc9dcd5a038608e21240b044e68ac9210ce62bc1b661588935fae136a0e71c527c61b3b14
SSDEEP

384:fX52rTrdENX/vsttAneXa2G4/QrEhiFQR5cu58T2Xf9p:fXgVECYY7yEhiFC5R5AK9p

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2360 set thread context of 3064	2360	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	30

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1088	3064	WerFault.exe	30

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2360	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 3064	2360	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	30
PID 2360 wrote to memory of 3064	2360	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	30
PID 2360 wrote to memory of 3064	2360	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	30
PID 2360 wrote to memory of 3064	2360	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	30
PID 2360 wrote to memory of 3064	2360	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	30
PID 2360 wrote to memory of 3064	2360	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	30
PID 2360 wrote to memory of 3064	2360	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	30
PID 2360 wrote to memory of 3064	2360	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	30
PID 3064 wrote to memory of 1088	3064	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	31
PID 3064 wrote to memory of 1088	3064	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	31
PID 3064 wrote to memory of 1088	3064	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	31
PID 3064 wrote to memory of 1088	3064	2cbad5d39c52129484d086780c3c4a8f_JaffaCakes118.exe	31

memory/2360-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2360-13-0x0000000000240000-0x0000000000248000-memory.dmp

Filesize
32KB

Download
memory/2360-17-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/3064-3-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/3064-16-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/3064-12-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/3064-11-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/3064-9-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/3064-7-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/3064-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/3064-18-0x0000000000400000-0x0000000000402600-memory.dmp

Filesize
9KB

Download