2b144d11e1cd0fd93cd37f260ac5896bf0b232e9369c4fbb9ccae4b07baf006a

Analysis

max time kernel
140s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
10-07-2024 12:59

Target

34d3530a0135930f2c9148cdf9914b8d_JaffaCakes118.exe
Size

597KB
MD5

34d3530a0135930f2c9148cdf9914b8d
SHA1

73e5cb49cfe9bddb0521d256ca9e892b26c835de
SHA256

2b144d11e1cd0fd93cd37f260ac5896bf0b232e9369c4fbb9ccae4b07baf006a
SHA512

9963a30b12719455a98d201eb8e55cf29ec16e12135b57b3ee5207e7db029a2447c7c0013bb237f4019a80619fbbec95e53afdf47c45d5b1c467033f2e07ad5f
SSDEEP

12288:jujR50DWlt6ILktN4Q9zQo30veuAanmGixRQz5ysCKk:jAR50M3Q7lKRGuAAmVxOz8y

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2316	1976	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1976 wrote to memory of 2316	1976	34d3530a0135930f2c9148cdf9914b8d_JaffaCakes118.exe	30
PID 1976 wrote to memory of 2316	1976	34d3530a0135930f2c9148cdf9914b8d_JaffaCakes118.exe	30
PID 1976 wrote to memory of 2316	1976	34d3530a0135930f2c9148cdf9914b8d_JaffaCakes118.exe	30
PID 1976 wrote to memory of 2316	1976	34d3530a0135930f2c9148cdf9914b8d_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\34d3530a0135930f2c9148cdf9914b8d_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\34d3530a0135930f2c9148cdf9914b8d_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1976
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1976 -s 120
  2⤵
  - Program crash
  PID:2316

memory/1976-0-0x0000000000400000-0x0000000000512000-memory.dmp

Filesize
1.1MB

Download