7384c79faceb62a3a7db6d8fce292100d4e67b882aa4e81bf127593f1b027e42

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
14-07-2024 00:32

Target

43d207c414f62f8721810d089cee0566_JaffaCakes118.exe
Size

1.6MB
MD5

43d207c414f62f8721810d089cee0566
SHA1

5b7c79c6fdfad71a1351737a145218553708a433
SHA256

7384c79faceb62a3a7db6d8fce292100d4e67b882aa4e81bf127593f1b027e42
SHA512

a04c2baccfb30b88853e959ed68e4b08bf2e4fd3582d49426ce1b799da47ef653197b1610a482280159d0458cb715051bbda995fab38604b248d783eab129aa1
SSDEEP

49152:gTUYQgyrdHojE9/LpY6p2U58yyxN1QpNwE50:gwY/KIjE9DpkU5yXQM

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2200	2056	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2056 wrote to memory of 2200	2056	43d207c414f62f8721810d089cee0566_JaffaCakes118.exe	30
PID 2056 wrote to memory of 2200	2056	43d207c414f62f8721810d089cee0566_JaffaCakes118.exe	30
PID 2056 wrote to memory of 2200	2056	43d207c414f62f8721810d089cee0566_JaffaCakes118.exe	30
PID 2056 wrote to memory of 2200	2056	43d207c414f62f8721810d089cee0566_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\43d207c414f62f8721810d089cee0566_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\43d207c414f62f8721810d089cee0566_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2056
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2056 -s 180
  2⤵
  - Program crash
  PID:2200