7a66b1c7464f16e68abd64ea68815ae363777594acd1a868f3922d8725596194

Analysis

max time kernel
12s
max time network
18s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
09/07/2024, 18:58

Target

319422405a1a190a457d7201b3aa1b13_JaffaCakes118.exe
Size

512KB
MD5

319422405a1a190a457d7201b3aa1b13
SHA1

f7cae5652c9db702534de6a3903450c1afcafa3e
SHA256

7a66b1c7464f16e68abd64ea68815ae363777594acd1a868f3922d8725596194
SHA512

3a0317b6e7727a40835decd9ba5cd0f0e260fbfd90947d89dc37b16fb0002912dab93c58828386db30669b8e1904b95905239b5638336dbd49358ce49d0d8512
SSDEEP

12288:CxDGaHdeGmZ5MUC+efxILItXKZbyqVkGSBKLp:Cx9degagwkLKLp

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2024	2296	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 2024	2296	319422405a1a190a457d7201b3aa1b13_JaffaCakes118.exe	30
PID 2296 wrote to memory of 2024	2296	319422405a1a190a457d7201b3aa1b13_JaffaCakes118.exe	30
PID 2296 wrote to memory of 2024	2296	319422405a1a190a457d7201b3aa1b13_JaffaCakes118.exe	30
PID 2296 wrote to memory of 2024	2296	319422405a1a190a457d7201b3aa1b13_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\319422405a1a190a457d7201b3aa1b13_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\319422405a1a190a457d7201b3aa1b13_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2296
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2296 -s 36
  2⤵
  - Program crash
  PID:2024

memory/2296-0-0x0000000010000000-0x0000000010083200-memory.dmp

Filesize
524KB

Download