bdb05cbc3e27fb454074a6e304b5dac3bc7386e844f37d9763f5f688c810cf88

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
10-07-2024 21:09

Target

3664695e46bc115dbc71bb091ac6b79c_JaffaCakes118.exe
Size

64KB
MD5

3664695e46bc115dbc71bb091ac6b79c
SHA1

b6e1dc88f42bfc6642af2c72d7081f94ab0a3188
SHA256

bdb05cbc3e27fb454074a6e304b5dac3bc7386e844f37d9763f5f688c810cf88
SHA512

2fa0f00e633d0f19aa9485b41b85a23934b1fd4403a1f8003893d12f2b2e383155c03ff37c3557138b4918abc980388d6eb0554a88ae2da19aace7bcdfee7dbe
SSDEEP

1536:EUV1DbOeK1SBtSuj8Cq1UgQK876D7Sey/freeF:EOrBtAt18KrD7xyaeF

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2064 2468 WerFault.exe 3664695e46bc115dbc71bb091ac6b79c_JaffaCakes118.exe

pid	pid_target	process	target process
2064	2468	WerFault.exe	3664695e46bc115dbc71bb091ac6b79c_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

3664695e46bc115dbc71bb091ac6b79c_JaffaCakes118.exe

description	pid	process	target process
PID 2468 wrote to memory of 2064	2468	3664695e46bc115dbc71bb091ac6b79c_JaffaCakes118.exe	WerFault.exe
PID 2468 wrote to memory of 2064	2468	3664695e46bc115dbc71bb091ac6b79c_JaffaCakes118.exe	WerFault.exe
PID 2468 wrote to memory of 2064	2468	3664695e46bc115dbc71bb091ac6b79c_JaffaCakes118.exe	WerFault.exe
PID 2468 wrote to memory of 2064	2468	3664695e46bc115dbc71bb091ac6b79c_JaffaCakes118.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\3664695e46bc115dbc71bb091ac6b79c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3664695e46bc115dbc71bb091ac6b79c_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2468

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2468 -s 148
2⤵
- Program crash
PID:2064

memory/2468-0-0x0000000000510000-0x0000000000522000-memory.dmp

Filesize
72KB

Download
memory/2468-1-0x0000000000020000-0x000000000002F000-memory.dmp

Filesize
60KB

Download