60b9a02d40b0543ebe3f3d9a2c460300727408322649e8512348d2f2522b0140

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
10/07/2024, 08:08

Target

33e9f57d12a1ace888687c15ec8bac63_JaffaCakes118.dll
Size

353KB
MD5

33e9f57d12a1ace888687c15ec8bac63
SHA1

f2c81d8f3755a6c5efb5075bd2fde7928057215c
SHA256

60b9a02d40b0543ebe3f3d9a2c460300727408322649e8512348d2f2522b0140
SHA512

3f65ef02a648ebb0785010373a0699f215653ae8a4363513ff46eec514653766cc714a5e6558765459e6c28f589c9db8681ee5f4619d96f257b4635e6d13388e
SSDEEP

6144:c+G2ApN3wWs7SstoixXCQqwuDxtjEVQaiomytyQVU+myf2rJ7OtTtWEdN3bj1DPr:VCNbsTtoSXT0DxTa3AQe+DeE9DP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
804	2200	WerFault.exe	30

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 2200	2368	regsvr32.exe	30
PID 2368 wrote to memory of 2200	2368	regsvr32.exe	30
PID 2368 wrote to memory of 2200	2368	regsvr32.exe	30
PID 2368 wrote to memory of 2200	2368	regsvr32.exe	30
PID 2368 wrote to memory of 2200	2368	regsvr32.exe	30
PID 2368 wrote to memory of 2200	2368	regsvr32.exe	30
PID 2368 wrote to memory of 2200	2368	regsvr32.exe	30
PID 2200 wrote to memory of 804	2200	regsvr32.exe	31
PID 2200 wrote to memory of 804	2200	regsvr32.exe	31
PID 2200 wrote to memory of 804	2200	regsvr32.exe	31
PID 2200 wrote to memory of 804	2200	regsvr32.exe	31

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\33e9f57d12a1ace888687c15ec8bac63_JaffaCakes118.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\33e9f57d12a1ace888687c15ec8bac63_JaffaCakes118.dll
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2200
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 304
    3⤵
    - Program crash
    PID:804

memory/2200-0-0x00000000022E0000-0x00000000023E1000-memory.dmp

Filesize
1.0MB

Download
memory/2200-1-0x00000000000D0000-0x00000000000D2000-memory.dmp

Filesize
8KB

Download
memory/2200-2-0x00000000022E0000-0x00000000023E1000-memory.dmp

Filesize
1.0MB

Download
memory/2200-4-0x00000000000D0000-0x00000000000D2000-memory.dmp

Filesize
8KB

Download