4376260e062cb3fd90697625ed198abe7bc2d0c38dbe873b035b7252a6cc1ae3

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 22:51

Target

4bc0a21f2c65301f5b9f8252857277fa_JaffaCakes118.exe
Size

48KB
MD5

4bc0a21f2c65301f5b9f8252857277fa
SHA1

c4b05ad30452092db027c1110240dc914d9e911d
SHA256

4376260e062cb3fd90697625ed198abe7bc2d0c38dbe873b035b7252a6cc1ae3
SHA512

da4e9c98ad782bf1eb207e08fc1b4be175a905b2bf2d7e683eeb1f5ea63e797cddfeca8a47b7d899e55416f095e915e559bd9f350f55b231e3478379141240bf
SSDEEP

384:0LmL1sIzW6VgubY9GM34CVfel53vAiCDwpD6yPvIK:cmqIzWOzs4giCDwJ9HIK

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2748	2232	WerFault.exe	27

Suspicious use of SetWindowsHookEx 3 IoCs

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 2748	2232	4bc0a21f2c65301f5b9f8252857277fa_JaffaCakes118.exe	28
PID 2232 wrote to memory of 2748	2232	4bc0a21f2c65301f5b9f8252857277fa_JaffaCakes118.exe	28
PID 2232 wrote to memory of 2748	2232	4bc0a21f2c65301f5b9f8252857277fa_JaffaCakes118.exe	28
PID 2232 wrote to memory of 2748	2232	4bc0a21f2c65301f5b9f8252857277fa_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\4bc0a21f2c65301f5b9f8252857277fa_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4bc0a21f2c65301f5b9f8252857277fa_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2232 -s 652
  2⤵
  - Program crash
  PID:2748