491ccadc56207d373dd62238cee62e2c1c265bbc2fe8b94d45d69d5316995bdb

Analysis

max time kernel
14s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
13-07-2024 16:49

Target

4287e1584996028b7fd950a147d1a7b3_JaffaCakes118.exe
Size

15KB
MD5

4287e1584996028b7fd950a147d1a7b3
SHA1

96d4fc18d11ec12a05c8b06823c42825d597f96a
SHA256

491ccadc56207d373dd62238cee62e2c1c265bbc2fe8b94d45d69d5316995bdb
SHA512

d34fde5694718e77fc3c315680661ad18efecd5f5db8d52eee717c35f57efd12ed0d51c846e082b8e22537ada906944fe94ee72cfc3b2a4b8c47194f3d933eed
SSDEEP

384:Hs+aUkGu/8cM0U0VQTwQ+/IzngtBpGdyCcJXxA/EsZ3Ne1TgU:HvlvzlweTwQ3qBpAtcJBA/EsZ3g

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2364	2388	WerFault.exe	28

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2388 wrote to memory of 2364	2388	4287e1584996028b7fd950a147d1a7b3_JaffaCakes118.exe	29
PID 2388 wrote to memory of 2364	2388	4287e1584996028b7fd950a147d1a7b3_JaffaCakes118.exe	29
PID 2388 wrote to memory of 2364	2388	4287e1584996028b7fd950a147d1a7b3_JaffaCakes118.exe	29
PID 2388 wrote to memory of 2364	2388	4287e1584996028b7fd950a147d1a7b3_JaffaCakes118.exe	29

C:\Users\Admin\AppData\Local\Temp\4287e1584996028b7fd950a147d1a7b3_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4287e1584996028b7fd950a147d1a7b3_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2388
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2388 -s 36
  2⤵
  - Program crash
  PID:2364