d7ebdb56215b9722105d341b90112410ca26d87085f00c97e51c423c445eeb71

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 03:21

Target

3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe
Size

39KB
MD5

3ffde5b15ec2856b7bc899b30ec7ebc3
SHA1

dfb5ffe976786245504bee236c599dc0aee09f0c
SHA256

d7ebdb56215b9722105d341b90112410ca26d87085f00c97e51c423c445eeb71
SHA512

33911fb1c6877b1283716b58efad0e24a472493375bb08a44c9192b605859b141ba20a5feb75b54dbd0f49b57515184105df7776183db139499b8440546b58eb
SSDEEP

768:pAh0wGCfXJ8EyYIb0CvcchZqTEz2n27YT8t/:qvVBVhRCvmYzmDT8t/

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2332	1968	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1968 wrote to memory of 2332	1968	3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe	30
PID 1968 wrote to memory of 2332	1968	3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe	30
PID 1968 wrote to memory of 2332	1968	3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe	30
PID 1968 wrote to memory of 2332	1968	3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1968
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1968 -s 36
  2⤵
  - Program crash
  PID:2332