fd8ceaf90505240750d9ca48d930eb8993cdf05c4335529eea4d7bfd1fe4b530

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 15:10

Target

5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe
Size

124KB
MD5

5c7a59108944337a285ad81e7ad6a0d3
SHA1

3ec03db7843c30b7c11c846454f42ca3d029954a
SHA256

fd8ceaf90505240750d9ca48d930eb8993cdf05c4335529eea4d7bfd1fe4b530
SHA512

aafe972655a5b89c009d0bb34b55cd200a806408b9f6bea136b3cc8c7a20873bc5cb972845e3d485b5ba656a8e6ddda5cad8e4ce0da8f48b7f9c9d40b1d8b569
SSDEEP

3072:z4gddcAxJRgv7QHywpJ2Gh+rxppeL8ziuI:9NxHgv7QHywfAUP

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2028 set thread context of 2956	2028	5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe	30

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1508	2956	WerFault.exe	30

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2028 wrote to memory of 2956	2028	5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe	30
PID 2028 wrote to memory of 2956	2028	5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe	30
PID 2028 wrote to memory of 2956	2028	5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe	30
PID 2028 wrote to memory of 2956	2028	5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe	30
PID 2028 wrote to memory of 2956	2028	5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe	30
PID 2028 wrote to memory of 2956	2028	5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe	30
PID 2956 wrote to memory of 1508	2956	5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe	31
PID 2956 wrote to memory of 1508	2956	5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe	31
PID 2956 wrote to memory of 1508	2956	5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe	31
PID 2956 wrote to memory of 1508	2956	5c7a59108944337a285ad81e7ad6a0d3_JaffaCakes118.exe	31

memory/2028-4-0x0000000010000000-0x0000000010026000-memory.dmp

Filesize
152KB

Download
memory/2956-0-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2956-7-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2956-6-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2956-3-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2956-1-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download