3a137fd4fc0642542443c60a7a48e5d34c704375952be2b7670df53b07b2c84d

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 14:02

Target

5c3ed1b213f6e4c1cdfbf8d0002bcc9b_JaffaCakes118.exe
Size

31KB
MD5

5c3ed1b213f6e4c1cdfbf8d0002bcc9b
SHA1

8f0baf697ba2bce90896ae13f6279fcd3cc8376f
SHA256

3a137fd4fc0642542443c60a7a48e5d34c704375952be2b7670df53b07b2c84d
SHA512

2a1a44dc0b1c9d876698e5979200bcd55a4028113e9936f9aca51f6d646afb8d10847790ea0638d89e1b5a8ddbf44d832bc2ed0213b4dbaa3f4672148bea0808
SSDEEP

768:ziZfXOhlKoLxtCt74y/842kGim5admgS0CX0Mu:ICKoLD+h/84UimkdxMu

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2000	1720	WerFault.exe	29

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1720	5c3ed1b213f6e4c1cdfbf8d0002bcc9b_JaffaCakes118.exe
1720	5c3ed1b213f6e4c1cdfbf8d0002bcc9b_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 1720 wrote to memory of 1220	1720	5c3ed1b213f6e4c1cdfbf8d0002bcc9b_JaffaCakes118.exe	21
PID 1720 wrote to memory of 1220	1720	5c3ed1b213f6e4c1cdfbf8d0002bcc9b_JaffaCakes118.exe	21
PID 1720 wrote to memory of 1220	1720	5c3ed1b213f6e4c1cdfbf8d0002bcc9b_JaffaCakes118.exe	21
PID 1720 wrote to memory of 1220	1720	5c3ed1b213f6e4c1cdfbf8d0002bcc9b_JaffaCakes118.exe	21
PID 1720 wrote to memory of 2000	1720	5c3ed1b213f6e4c1cdfbf8d0002bcc9b_JaffaCakes118.exe	30
PID 1720 wrote to memory of 2000	1720	5c3ed1b213f6e4c1cdfbf8d0002bcc9b_JaffaCakes118.exe	30
PID 1720 wrote to memory of 2000	1720	5c3ed1b213f6e4c1cdfbf8d0002bcc9b_JaffaCakes118.exe	30
PID 1720 wrote to memory of 2000	1720	5c3ed1b213f6e4c1cdfbf8d0002bcc9b_JaffaCakes118.exe	30

memory/1220-1-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1220-5-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/1720-0-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/1720-4-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download