151049ec82dcac6b56eef8dd3c73bee78ce25a3011dc456a26a726bc277c764f

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
09/07/2024, 13:15

Target

308615eced43f3996437fa5fdff46070_JaffaCakes118.pdf
Size

5KB
MD5

308615eced43f3996437fa5fdff46070
SHA1

7e53cf17a73dad96ef6c20189d2a1854296144d9
SHA256

151049ec82dcac6b56eef8dd3c73bee78ce25a3011dc456a26a726bc277c764f
SHA512

13452e4f76f18a67077605a7e9e31d5ca980de375275545d706867d42e2350d850953ea3c957f3ece81d7c7e9c82d42c2c3eceb47cef9c8884ad361e8d106a0a
SSDEEP

96:cexhkym6AUt7XjAzOr1978gY177jIJN/7HM8nAz80uSbhuxHr3UR7ofvxzdpwZRT:cecym6AuAzw78gic/dnAzGygrUhax5pW

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
304	2232	WerFault.exe	27

Suspicious use of SetWindowsHookEx 3 IoCs

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 304	2232	AcroRd32.exe	28
PID 2232 wrote to memory of 304	2232	AcroRd32.exe	28
PID 2232 wrote to memory of 304	2232	AcroRd32.exe	28
PID 2232 wrote to memory of 304	2232	AcroRd32.exe	28

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\308615eced43f3996437fa5fdff46070_JaffaCakes118.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2232 -s 752
  2⤵
  - Program crash
  PID:304