beee99b2e821e7751cd71b1b0dc1f8ceb6068314f00933799270bedc86d3aab1

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 21:05

Target

4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe
Size

5KB
MD5

4b64d39cd04a9493b8f91be531cc6455
SHA1

12b59df24a5492040ea7feb9dc58ef19d4c68d7e
SHA256

beee99b2e821e7751cd71b1b0dc1f8ceb6068314f00933799270bedc86d3aab1
SHA512

27ca7a0215cb7239e409d08b7d7d589e1774ab0b99390dcf670ea79272cb7548de02e810a16f317d227cd38f56c5a0ae7f8938bebd7796fef8297916b824d6cd
SSDEEP

96:vtlwI1JwSqHnEn9ItJquyFW6UzR1CtReU0OFgFuYCkZUld9LI:L9KknAxybs1CtR7ew9tp0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2200	2368	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 2200	2368	4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe	30
PID 2368 wrote to memory of 2200	2368	4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe	30
PID 2368 wrote to memory of 2200	2368	4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe	30
PID 2368 wrote to memory of 2200	2368	4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2368 -s 36
  2⤵
  - Program crash
  PID:2200