4988d5a97c383a0209fcfe428ffca375fa3f5ce461aa95d838706b842bb1e20d

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
11/07/2024, 21:57

Target

3add8787c5608afaf5c9aef7027d5509_JaffaCakes118.exe
Size

10KB
MD5

3add8787c5608afaf5c9aef7027d5509
SHA1

313c991badf6466cddbabc68b2cde1f2a25f44db
SHA256

4988d5a97c383a0209fcfe428ffca375fa3f5ce461aa95d838706b842bb1e20d
SHA512

387cf57940951cd496e9d100910fa88bbb10453bd0da6a555ad547394854383ab2392698e678db4e46e39f8e8b5516fbbc49a324a9d5a074c4c4c047f7310ef4
SSDEEP

96:nlxdPUMmjeWJwPzlop3lCtlcHeTgbJBOU1QiZH6UlSBzT9K5MrIHqUNDNZBNuAxG:nTPW2JrNsVV1BZH1kXXIz3BoAxbb+V2Y

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1796	2384	WerFault.exe	29

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2384 wrote to memory of 1796	2384	3add8787c5608afaf5c9aef7027d5509_JaffaCakes118.exe	30
PID 2384 wrote to memory of 1796	2384	3add8787c5608afaf5c9aef7027d5509_JaffaCakes118.exe	30
PID 2384 wrote to memory of 1796	2384	3add8787c5608afaf5c9aef7027d5509_JaffaCakes118.exe	30
PID 2384 wrote to memory of 1796	2384	3add8787c5608afaf5c9aef7027d5509_JaffaCakes118.exe	30
PID 2384 wrote to memory of 1796	2384	3add8787c5608afaf5c9aef7027d5509_JaffaCakes118.exe	30
PID 2384 wrote to memory of 1796	2384	3add8787c5608afaf5c9aef7027d5509_JaffaCakes118.exe	30
PID 2384 wrote to memory of 1796	2384	3add8787c5608afaf5c9aef7027d5509_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\3add8787c5608afaf5c9aef7027d5509_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3add8787c5608afaf5c9aef7027d5509_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2384
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2384 -s 252
  2⤵
  - Program crash
  PID:1796

memory/2384-0-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/2384-2-0x0000000000020000-0x0000000000026000-memory.dmp

Filesize
24KB

Download
memory/2384-1-0x0000000000020000-0x0000000000026000-memory.dmp

Filesize
24KB

Download