f5c9272a62336d1f418641ba1e76949d959e4c1237ed535ed2d601235ec7760d

Analysis

max time kernel
141s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 01:19

Target

62372773ca3986c2c5c1e854b4665d2c_JaffaCakes118.exe
Size

136KB
MD5

62372773ca3986c2c5c1e854b4665d2c
SHA1

920c7e4dafd46ff87f88a46c51aaebc6321c9e9d
SHA256

f5c9272a62336d1f418641ba1e76949d959e4c1237ed535ed2d601235ec7760d
SHA512

04830a6916bab3bf31fded1f2d7ae25d9a6eb849c389a556a3139ebcc0f6dc4c2cbdf61cc158765bab00d909404f1b42db4ceb2b348965ce841851693aaf7f16
SSDEEP

3072:vD0BHLLsmcB2JE6BhraivprqU07t0VGBOR3h:U0mNrAivpmU0zEx

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1536	1480	WerFault.exe	83

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1480 wrote to memory of 3580	1480	62372773ca3986c2c5c1e854b4665d2c_JaffaCakes118.exe	56
PID 1480 wrote to memory of 3580	1480	62372773ca3986c2c5c1e854b4665d2c_JaffaCakes118.exe	56
PID 1480 wrote to memory of 3580	1480	62372773ca3986c2c5c1e854b4665d2c_JaffaCakes118.exe	56
PID 1480 wrote to memory of 3580	1480	62372773ca3986c2c5c1e854b4665d2c_JaffaCakes118.exe	56
PID 1480 wrote to memory of 3580	1480	62372773ca3986c2c5c1e854b4665d2c_JaffaCakes118.exe	56
PID 1480 wrote to memory of 3580	1480	62372773ca3986c2c5c1e854b4665d2c_JaffaCakes118.exe	56

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1480 -ip 1480
1⤵
PID:1308

memory/1480-0-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/1480-2-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1480-9-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1480-11-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/3580-3-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/3580-5-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download