9a3aabc7b5b8a86dd094e4454775758eec64e4c3aab1032273d5d4a3de361f04

Analysis

max time kernel
142s
max time network
123s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 18:29

Target

42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe
Size

279KB
MD5

42d6ff37c69309c88930f050a26841f1
SHA1

9001d6fa7793e6357f166749c76d8ed455d81210
SHA256

9a3aabc7b5b8a86dd094e4454775758eec64e4c3aab1032273d5d4a3de361f04
SHA512

a854d47effb88bd61fd3851b2c829d33a19ae72d71ade7f28cfb81b43553accc777076458412cd505430356ee439489430602390cb86a154025b62e2293c44f0
SSDEEP

3072:H8ziGNQ7WpPgVYyX/4rjWN5nZ+hWgZ29L+faLYxSLV5GNKOapuafFqwP4Y8cbbS2:HPB7WpoKuN5Z+BkLdqgSopTTbnSi

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3028 set thread context of 2712	3028	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	30

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1412	2712	WerFault.exe	30

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 3028 wrote to memory of 2712	3028	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	30
PID 3028 wrote to memory of 2712	3028	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	30
PID 3028 wrote to memory of 2712	3028	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	30
PID 3028 wrote to memory of 2712	3028	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	30
PID 3028 wrote to memory of 2712	3028	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	30
PID 3028 wrote to memory of 2712	3028	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	30
PID 3028 wrote to memory of 2712	3028	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	30
PID 3028 wrote to memory of 2712	3028	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	30
PID 3028 wrote to memory of 2712	3028	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	30
PID 2712 wrote to memory of 1412	2712	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	31
PID 2712 wrote to memory of 1412	2712	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	31
PID 2712 wrote to memory of 1412	2712	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	31
PID 2712 wrote to memory of 1412	2712	42d6ff37c69309c88930f050a26841f1_JaffaCakes118.exe	31

memory/2712-0-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/2712-2-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/2712-5-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/2712-7-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/2712-9-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/2712-10-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/2712-12-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/2712-13-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/2712-14-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download