62e71008badc684ca4ece450a45fef54de9bba109c342ac81862f906ce19d97a

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 10:44

Target

62eb90a4f6c0a229d0cc21adb9473416_JaffaCakes118.exe
Size

67KB
MD5

62eb90a4f6c0a229d0cc21adb9473416
SHA1

771c40192795f49015ae12de870be8e49a97c8ee
SHA256

62e71008badc684ca4ece450a45fef54de9bba109c342ac81862f906ce19d97a
SHA512

4823f9300c8733ca12928248d278fc5d90e37d218fdf3c7f22b1b6bf15bed5227c2bf7a1fdc4f874bec1757391a756ae541918aa683bf8fd36f7c5fbfa923cac
SSDEEP

1536:Ri+vzb7WcexHkz/ilH8Ro+9U7ZP3qoA8jB+j:Rxzb7lexETil8RDU7ZP3D+

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2044	2556	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2556 wrote to memory of 2044	2556	62eb90a4f6c0a229d0cc21adb9473416_JaffaCakes118.exe	30
PID 2556 wrote to memory of 2044	2556	62eb90a4f6c0a229d0cc21adb9473416_JaffaCakes118.exe	30
PID 2556 wrote to memory of 2044	2556	62eb90a4f6c0a229d0cc21adb9473416_JaffaCakes118.exe	30
PID 2556 wrote to memory of 2044	2556	62eb90a4f6c0a229d0cc21adb9473416_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\62eb90a4f6c0a229d0cc21adb9473416_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\62eb90a4f6c0a229d0cc21adb9473416_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2556
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2556 -s 36
  2⤵
  - Program crash
  PID:2044

memory/2556-0-0x0000000000E80000-0x0000000000EA9000-memory.dmp

Filesize
164KB

Download