5607ef27939c53a1fc5b5b66922e4980463e12cadc5829868abd6fa60bb3fee3

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
15-07-2024 21:40

Target

4b84dd5de231c4ca622eb053c4a180e1_JaffaCakes118.exe
Size

266KB
MD5

4b84dd5de231c4ca622eb053c4a180e1
SHA1

52209773f7ce5e549e9973b1afe85ffa825fcbc5
SHA256

5607ef27939c53a1fc5b5b66922e4980463e12cadc5829868abd6fa60bb3fee3
SHA512

6a0f3b8097eea1dc767822b0eb53143d1158e9aa339fc045bcfc6d3a2df5b76b9c00a89733f0a122b9be74acd0621d76331defc5c025f6a90b5e3b2bbeb2f465
SSDEEP

6144:NBWUV+ziUcC3h8W9w4oeDee9EBas3FIxbR+d+9zY7/IKabv1mtTBy2Z:jWUGxQ+9EbIz1mtT9

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2188	2128	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 2188	2128	4b84dd5de231c4ca622eb053c4a180e1_JaffaCakes118.exe	30
PID 2128 wrote to memory of 2188	2128	4b84dd5de231c4ca622eb053c4a180e1_JaffaCakes118.exe	30
PID 2128 wrote to memory of 2188	2128	4b84dd5de231c4ca622eb053c4a180e1_JaffaCakes118.exe	30
PID 2128 wrote to memory of 2188	2128	4b84dd5de231c4ca622eb053c4a180e1_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\4b84dd5de231c4ca622eb053c4a180e1_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4b84dd5de231c4ca622eb053c4a180e1_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2128 -s 88
  2⤵
  - Program crash
  PID:2188