48c8d429be711dea15dbb1f219ad7fad56fe3dae425034e74dedf9d922b8302d

Analysis

max time kernel
140s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 10:22

Target

4566da8011fadf480820e895edf228e2_JaffaCakes118.exe
Size

156KB
MD5

4566da8011fadf480820e895edf228e2
SHA1

ea3a8f9cf5007cb0139d2d3f36fba6728bc69e35
SHA256

48c8d429be711dea15dbb1f219ad7fad56fe3dae425034e74dedf9d922b8302d
SHA512

a0449351dfc778adbb13d14c26530a14cfc9778a83a24a24e8f49f0a77e125fd69ebe0c41399ccba78338f5bb0c31c7e380b2e00394db94d79c33a8749510050
SSDEEP

3072:oTv8E1OzvtahXatZbbtdG2geTRzezBRwhIpqtA:oqoqtdbv99TtezDGtA

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2528 set thread context of 1968	2528	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	29

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2232	1968	WerFault.exe	29

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2528 wrote to memory of 1968	2528	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	29
PID 2528 wrote to memory of 1968	2528	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	29
PID 2528 wrote to memory of 1968	2528	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	29
PID 2528 wrote to memory of 1968	2528	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	29
PID 2528 wrote to memory of 1968	2528	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	29
PID 2528 wrote to memory of 1968	2528	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	29
PID 2528 wrote to memory of 1968	2528	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	29
PID 2528 wrote to memory of 1968	2528	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	29
PID 2528 wrote to memory of 1968	2528	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	29
PID 2528 wrote to memory of 1968	2528	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	29
PID 1968 wrote to memory of 2232	1968	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	30
PID 1968 wrote to memory of 2232	1968	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	30
PID 1968 wrote to memory of 2232	1968	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	30
PID 1968 wrote to memory of 2232	1968	4566da8011fadf480820e895edf228e2_JaffaCakes118.exe	30

memory/1968-0-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download
memory/1968-2-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download
memory/1968-11-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download
memory/1968-9-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/1968-8-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download
memory/1968-14-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download
memory/1968-4-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download
memory/1968-7-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download