6cb1c041e4f12770cee3d8de9f0d9a7fcf7df8aab5968fd8e0826779faa3412c

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
13-07-2024 21:50

Target

437ab3a790384cd4f122ae9dcc0ed245_JaffaCakes118.exe
Size

88KB
MD5

437ab3a790384cd4f122ae9dcc0ed245
SHA1

3965f3311e56b97772e054bbe47b47dac293470a
SHA256

6cb1c041e4f12770cee3d8de9f0d9a7fcf7df8aab5968fd8e0826779faa3412c
SHA512

772dca903497b0c87e1654768f17574004707fe1ea573e1701247d527632e9ecf46588af52cb41aaedde0d05880cc0b10ea0df8cd5e0221b21093334cfd91b84
SSDEEP

1536:6klJht/fl7li+5Uwomo4nNBmRy3USEuDd/nW4SUIudg1cyoldwq3b7uVx:68JP/fmrwomVNoRjuDdnpSUfg1cyUl3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2512	2204	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2512	2204	437ab3a790384cd4f122ae9dcc0ed245_JaffaCakes118.exe	30
PID 2204 wrote to memory of 2512	2204	437ab3a790384cd4f122ae9dcc0ed245_JaffaCakes118.exe	30
PID 2204 wrote to memory of 2512	2204	437ab3a790384cd4f122ae9dcc0ed245_JaffaCakes118.exe	30
PID 2204 wrote to memory of 2512	2204	437ab3a790384cd4f122ae9dcc0ed245_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\437ab3a790384cd4f122ae9dcc0ed245_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\437ab3a790384cd4f122ae9dcc0ed245_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 148
  2⤵
  - Program crash
  PID:2512

memory/2204-0-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2204-1-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2204-4-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2204-3-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2204-2-0x0000000000436000-0x000000000043E000-memory.dmp

Filesize
32KB

Download