221e6fff2200bb0fbf5f3f4bddb890e4cadae28b6bf2f6346f2468fc13ab73e9

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
16/07/2024, 01:45

Target

4c4dfdbb082b0ca3685bac24f499cec0_JaffaCakes118.exe
Size

196KB
MD5

4c4dfdbb082b0ca3685bac24f499cec0
SHA1

6ee2916906e32c526875cfe38792f92aecd62ae2
SHA256

221e6fff2200bb0fbf5f3f4bddb890e4cadae28b6bf2f6346f2468fc13ab73e9
SHA512

210c52fb2c1e83b2f20c517d422d99d873392ced1bf47f363af9e3243384443b583c8511ce53604bc8e20ac3104269fd37a6bbe4e740ea031d5047615ea86487
SSDEEP

3072:e9pVnPybzV8Q3io0ce4LTI208YioBK9QRO8qeXQ:ebVnPybzV8Oio0ctLTt08doLRO8qeg

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2144	2180	WerFault.exe	29

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2180	4c4dfdbb082b0ca3685bac24f499cec0_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 2144	2180	4c4dfdbb082b0ca3685bac24f499cec0_JaffaCakes118.exe	30
PID 2180 wrote to memory of 2144	2180	4c4dfdbb082b0ca3685bac24f499cec0_JaffaCakes118.exe	30
PID 2180 wrote to memory of 2144	2180	4c4dfdbb082b0ca3685bac24f499cec0_JaffaCakes118.exe	30
PID 2180 wrote to memory of 2144	2180	4c4dfdbb082b0ca3685bac24f499cec0_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\4c4dfdbb082b0ca3685bac24f499cec0_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4c4dfdbb082b0ca3685bac24f499cec0_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2180
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2180 -s 196
  2⤵
  - Program crash
  PID:2144