b745d2319975298c9a9f8058bf5d899ef7788db348d3abd3c7dd849ed9e40196

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
10/07/2024, 16:44

Target

358c5feb1896c54d2da2a22d7dad9e34_JaffaCakes118.exe
Size

298KB
MD5

358c5feb1896c54d2da2a22d7dad9e34
SHA1

9aa8767a03125bff347fdccc520ceb1d03cbf4a8
SHA256

b745d2319975298c9a9f8058bf5d899ef7788db348d3abd3c7dd849ed9e40196
SHA512

8c11064054ade7cba5a9be7204a1e99fcf90e9e2151a98fa23dc39c146106ebd1a882711b2b3288f0c05f031d9af14dd7a7696f5b155e5cbaadb12e6ee028efc
SSDEEP

6144:Sszb0kPy5RhUxsMaHdwATSXWSP+yeTGThrDo:Sw0kKrmsdkBeq2

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2384	1984	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1984 wrote to memory of 2384	1984	358c5feb1896c54d2da2a22d7dad9e34_JaffaCakes118.exe	30
PID 1984 wrote to memory of 2384	1984	358c5feb1896c54d2da2a22d7dad9e34_JaffaCakes118.exe	30
PID 1984 wrote to memory of 2384	1984	358c5feb1896c54d2da2a22d7dad9e34_JaffaCakes118.exe	30
PID 1984 wrote to memory of 2384	1984	358c5feb1896c54d2da2a22d7dad9e34_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\358c5feb1896c54d2da2a22d7dad9e34_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\358c5feb1896c54d2da2a22d7dad9e34_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1984
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1984 -s 44
  2⤵
  - Program crash
  PID:2384