24d0e898f70f1e98dc07077533553121136c52787eab8909c73cb2c6b8728730

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
12/07/2024, 06:58

Target

3c639589ba49960c90004061a38897cf_JaffaCakes118.dll
Size

74KB
MD5

3c639589ba49960c90004061a38897cf
SHA1

5e858819135497c44a3b6e3ea635d7e6822ad5d9
SHA256

24d0e898f70f1e98dc07077533553121136c52787eab8909c73cb2c6b8728730
SHA512

a91653d5a535f7c468cf0f8d5ea747bf5c96e16464c62e9fd735902e68c431769cdcbe2ab7c64522a521591e3bac4873c3a2776044672370c5a55135686802da
SSDEEP

1536:1KGq1QIs0P3ZVvXwBQwMPdfc7nToIflUQd7K:IPs0P7z/P9cbTBflUM7K

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2788	2720	WerFault.exe	30

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 344 wrote to memory of 2720	344	rundll32.exe	30
PID 344 wrote to memory of 2720	344	rundll32.exe	30
PID 344 wrote to memory of 2720	344	rundll32.exe	30
PID 344 wrote to memory of 2720	344	rundll32.exe	30
PID 344 wrote to memory of 2720	344	rundll32.exe	30
PID 344 wrote to memory of 2720	344	rundll32.exe	30
PID 344 wrote to memory of 2720	344	rundll32.exe	30
PID 2720 wrote to memory of 2788	2720	rundll32.exe	31
PID 2720 wrote to memory of 2788	2720	rundll32.exe	31
PID 2720 wrote to memory of 2788	2720	rundll32.exe	31
PID 2720 wrote to memory of 2788	2720	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3c639589ba49960c90004061a38897cf_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:344
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\3c639589ba49960c90004061a38897cf_JaffaCakes118.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2720
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2720 -s 420
    3⤵
    - Program crash
    PID:2788

memory/2720-0-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download