740cff5b10fb0ae52b2120ad9cdf79965535743ba36cacf6bf76fb4028910927

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
09-07-2024 08:38

Target

2fad0fb937e897b81e62addac08b7526_JaffaCakes118.exe
Size

12KB
MD5

2fad0fb937e897b81e62addac08b7526
SHA1

8d02f53c066a03d1dfdd4b6140e3f28e5f26a4e7
SHA256

740cff5b10fb0ae52b2120ad9cdf79965535743ba36cacf6bf76fb4028910927
SHA512

fb8da3e0ff14a678b28ac51f0c6200df4d99cc0871f9d6c70c288bdd5cb9b1c334aa9b3f970b7c799bdc256d0225b3ec6ea5808b787233d3106e00a40c6e77b3
SSDEEP

96:ctRvZohJCyzobsuh0Uh3Ap40PnJaYOvDogC71yQtQKQYQ:c3mJC+obs60UR10Pnh97MQjQYQ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2256	2240	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 2256	2240	2fad0fb937e897b81e62addac08b7526_JaffaCakes118.exe	28
PID 2240 wrote to memory of 2256	2240	2fad0fb937e897b81e62addac08b7526_JaffaCakes118.exe	28
PID 2240 wrote to memory of 2256	2240	2fad0fb937e897b81e62addac08b7526_JaffaCakes118.exe	28
PID 2240 wrote to memory of 2256	2240	2fad0fb937e897b81e62addac08b7526_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\2fad0fb937e897b81e62addac08b7526_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2fad0fb937e897b81e62addac08b7526_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2240 -s 88
  2⤵
  - Program crash
  PID:2256