439e78ab47f8e18ded35054113cf43170f5f7cb8aeef8070539d92dff210de8b

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
21/07/2024, 22:17

Target

619dd761bb50a398c1bb53c264d36c7e_JaffaCakes118.exe
Size

12KB
MD5

619dd761bb50a398c1bb53c264d36c7e
SHA1

32e00bc640ff601f28d202451d8b60aaf3dd9a56
SHA256

439e78ab47f8e18ded35054113cf43170f5f7cb8aeef8070539d92dff210de8b
SHA512

418c0e491cfdea125303c35f70b4406759b96bc63c437b435cc3f53e6409732e6b176ad4b407a40914c23e39a84408381ce562676b769654c8c8482acd941e7e
SSDEEP

96:Nx7/JCPt+del1hd2LmecvGSn7VIF6ikA35QR:7/JCvdU0/aFpJQR

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2804	2808	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2808 wrote to memory of 2804	2808	619dd761bb50a398c1bb53c264d36c7e_JaffaCakes118.exe	30
PID 2808 wrote to memory of 2804	2808	619dd761bb50a398c1bb53c264d36c7e_JaffaCakes118.exe	30
PID 2808 wrote to memory of 2804	2808	619dd761bb50a398c1bb53c264d36c7e_JaffaCakes118.exe	30
PID 2808 wrote to memory of 2804	2808	619dd761bb50a398c1bb53c264d36c7e_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\619dd761bb50a398c1bb53c264d36c7e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\619dd761bb50a398c1bb53c264d36c7e_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2808
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2808 -s 88
  2⤵
  - Program crash
  PID:2804