a82bfe70f087d3390d8aea0939b5701e267c5bf53964c2d63163241b14dfd21b

Analysis

max time kernel
140s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
12/07/2024, 14:37

Target

3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe
Size

112KB
MD5

3dc86064a1488b5d1e488a357775f922
SHA1

9dcee96a15af68cf2f4dc574fa50d485ccc3aca0
SHA256

a82bfe70f087d3390d8aea0939b5701e267c5bf53964c2d63163241b14dfd21b
SHA512

1462f83814df8dd8094fa0e621d193d130ba6fe1937903535d8ae147043bfd924bf3fd1bbb9b0692305e2fa3157cf2fdac6781a4dbf9a4347c0f7bd0d240d900
SSDEEP

1536:vyz0UWxx1TUorH3oTRT//qihYaN5usz54SbVKhIjnZclAnGXTOxwrSZqY8r+TeI:vvxx1JLW/qg5zBKhCnZc+n5xwmNZeI

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 588 set thread context of 2100	588	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	30

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2944	2100	WerFault.exe	30

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
588	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 588 wrote to memory of 2100	588	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	30
PID 588 wrote to memory of 2100	588	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	30
PID 588 wrote to memory of 2100	588	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	30
PID 588 wrote to memory of 2100	588	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	30
PID 588 wrote to memory of 2100	588	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	30
PID 588 wrote to memory of 2100	588	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	30
PID 588 wrote to memory of 2100	588	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	30
PID 588 wrote to memory of 2100	588	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	30
PID 588 wrote to memory of 2100	588	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	30
PID 2100 wrote to memory of 2944	2100	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	31
PID 2100 wrote to memory of 2944	2100	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	31
PID 2100 wrote to memory of 2944	2100	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	31
PID 2100 wrote to memory of 2944	2100	3dc86064a1488b5d1e488a357775f922_JaffaCakes118.exe	31

memory/2100-10-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2100-8-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/2100-12-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/2100-15-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/2100-6-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/2100-4-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/2100-2-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download