4d371a901c51eb9119daec4abcf4c01b024a6e0dfce35f322fb3ab4c3334a27b

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
10/07/2024, 11:49

Target

3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe
Size

301KB
MD5

3497dc60d4963a1f32176661ffbeef69
SHA1

0b711b261c7d4792d5cab18dcb0d1da7835e9403
SHA256

4d371a901c51eb9119daec4abcf4c01b024a6e0dfce35f322fb3ab4c3334a27b
SHA512

ca2a96cc3f1f1978cd7e47c64fe5c421560241a5ea6ae3532a48dbb493586675b34aaa79b0725ee494d0598277e0617691cd4996ce6673f614e57120dfae6c4b
SSDEEP

6144:BtuIDeDxqdSzlWPu7g/Hc2dwv/rCPCE+nPTzojQNHJCOLZUDfQ6w6Bumj01Qf:BttDZ8gt/Hcmwv/rCK1nCQNHJTwsmumV

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2480 set thread context of 2100	2480	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	30

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2840	2100	WerFault.exe	30

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 2480 wrote to memory of 2100	2480	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	30
PID 2480 wrote to memory of 2100	2480	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	30
PID 2480 wrote to memory of 2100	2480	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	30
PID 2480 wrote to memory of 2100	2480	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	30
PID 2480 wrote to memory of 2100	2480	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	30
PID 2480 wrote to memory of 2100	2480	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	30
PID 2480 wrote to memory of 2100	2480	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	30
PID 2480 wrote to memory of 2100	2480	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	30
PID 2480 wrote to memory of 2100	2480	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	30
PID 2100 wrote to memory of 2840	2100	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	31
PID 2100 wrote to memory of 2840	2100	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	31
PID 2100 wrote to memory of 2840	2100	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	31
PID 2100 wrote to memory of 2840	2100	3497dc60d4963a1f32176661ffbeef69_JaffaCakes118.exe	31

memory/2100-5-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/2100-7-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2100-13-0x00000000011C0000-0x000000000120D000-memory.dmp

Filesize
308KB

Download
memory/2100-9-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/2100-3-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/2100-2-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/2100-1-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/2100-14-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/2480-0-0x00000000011C0000-0x000000000120D000-memory.dmp

Filesize
308KB

Download
memory/2480-12-0x00000000011C0000-0x000000000120D000-memory.dmp

Filesize
308KB

Download