e66b8d0c550e00701b8cb3e1f83c432646079892c12e458db47fdc6d3be261c6

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19-07-2024 01:17

Target

59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe
Size

163KB
MD5

59dfbb1772cbb5be62ebf30f2f1e97e7
SHA1

b6ab2066fe875048a05bcf90a1eb6b07a7971af1
SHA256

e66b8d0c550e00701b8cb3e1f83c432646079892c12e458db47fdc6d3be261c6
SHA512

57e6d7297836ced346a189714b028a26a9dfd4e0318a6ce3fd9fda106fef6396df53b7eebd2296fb079bd6c5bb0a55ea4e943fb665fe159d3c4352283e579e4a
SSDEEP

3072:7ck3PGNFxZwGvcQC6sOzno5hZDspaMqqDLzCBJIKo09ZoShbPmy5DAHe6tk:5PmxZMPNkqqDLz61ToShbrA+qk

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2264 set thread context of 2640	2264	59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe	31

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2312	2640	WerFault.exe	31

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2264 wrote to memory of 2640	2264	59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe	31
PID 2264 wrote to memory of 2640	2264	59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe	31
PID 2264 wrote to memory of 2640	2264	59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe	31
PID 2264 wrote to memory of 2640	2264	59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe	31
PID 2264 wrote to memory of 2640	2264	59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe	31
PID 2264 wrote to memory of 2640	2264	59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe	31
PID 2640 wrote to memory of 2312	2640	59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe	32
PID 2640 wrote to memory of 2312	2640	59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe	32
PID 2640 wrote to memory of 2312	2640	59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe	32
PID 2640 wrote to memory of 2312	2640	59dfbb1772cbb5be62ebf30f2f1e97e7_JaffaCakes118.exe	32

memory/2264-5-0x0000000010000000-0x0000000010028000-memory.dmp

Filesize
160KB

Download
memory/2640-8-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2640-9-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2640-6-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2640-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2640-2-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2640-0-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download