992c51fe7315e6465a10ca1f52acad6ee3d9112d8566905857344c3fc7c83ee8

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
09/07/2024, 23:42

Target

3278960dafb9cc37a617f9366e305959_JaffaCakes118.exe
Size

51KB
MD5

3278960dafb9cc37a617f9366e305959
SHA1

9623ea1a3b151ca44c30b713a4fa947e3d0938bd
SHA256

992c51fe7315e6465a10ca1f52acad6ee3d9112d8566905857344c3fc7c83ee8
SHA512

35ab13470934c05230a32a2719cf1fd6bb62941c50035d63e47f06d965ea6e648d11b44c3e5c5c3185ba09fb298d8af276a7263959dc3dbe7de67bf9570c0759
SSDEEP

1536:UO6smR7/1VMQ0dJRNgwnyHzp9cJkCU76r:r6JRhVMwwnyHzoI6r

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1936	2200	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2200 wrote to memory of 1936	2200	3278960dafb9cc37a617f9366e305959_JaffaCakes118.exe	30
PID 2200 wrote to memory of 1936	2200	3278960dafb9cc37a617f9366e305959_JaffaCakes118.exe	30
PID 2200 wrote to memory of 1936	2200	3278960dafb9cc37a617f9366e305959_JaffaCakes118.exe	30
PID 2200 wrote to memory of 1936	2200	3278960dafb9cc37a617f9366e305959_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\3278960dafb9cc37a617f9366e305959_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3278960dafb9cc37a617f9366e305959_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2200
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 36
  2⤵
  - Program crash
  PID:1936