9a7d9d53ddd11ef469380f29c346b4bcde459eb348c833d9bc5ed183e5832aa6

Analysis

max time kernel
143s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 22:56

Target

65229112523452900f6ef928e94213fa_JaffaCakes118.exe
Size

286KB
MD5

65229112523452900f6ef928e94213fa
SHA1

b17aa0beeefdd474c316ac43eadace5b772c0345
SHA256

9a7d9d53ddd11ef469380f29c346b4bcde459eb348c833d9bc5ed183e5832aa6
SHA512

d33dc361c5d941102a6e40ef2ea38634b50523d4f4f8ac1652103a6ba27a24d40c043d1fac4a4265b397f1624b42286708735c1dbc3f6a998f5b1fe1a9f29d68
SSDEEP

6144:RdB4PD7aIQviRUUuxkRL5uEBhWl/jmPCTNfsyorFxaQiiq9tbLO2JZ:x/MLOl/i6RernaWqz

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1232 set thread context of 2896	1232	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	30

Program crash 1 IoCs

pid	pid_target	Process	procid_target
844	2896	WerFault.exe	30

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 1232 wrote to memory of 2896	1232	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	30
PID 1232 wrote to memory of 2896	1232	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	30
PID 1232 wrote to memory of 2896	1232	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	30
PID 1232 wrote to memory of 2896	1232	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	30
PID 1232 wrote to memory of 2896	1232	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	30
PID 1232 wrote to memory of 2896	1232	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	30
PID 1232 wrote to memory of 2896	1232	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	30
PID 1232 wrote to memory of 2896	1232	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	30
PID 1232 wrote to memory of 2896	1232	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	30
PID 2896 wrote to memory of 844	2896	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	31
PID 2896 wrote to memory of 844	2896	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	31
PID 2896 wrote to memory of 844	2896	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	31
PID 2896 wrote to memory of 844	2896	65229112523452900f6ef928e94213fa_JaffaCakes118.exe	31

memory/2896-1-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/2896-2-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/2896-4-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/2896-6-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/2896-8-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/2896-10-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/2896-12-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/2896-13-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/2896-14-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download