7b356f85bd42350d40313657dc959245c3964fcdf2dc78bf5f010749fb6ad154

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 19:48

Target

649090e57974205ccea8997f6284644b_JaffaCakes118.exe
Size

184KB
MD5

649090e57974205ccea8997f6284644b
SHA1

b9b54d1402791b96dddc4177875026152eae1090
SHA256

7b356f85bd42350d40313657dc959245c3964fcdf2dc78bf5f010749fb6ad154
SHA512

352e3dcceb0e5f6120c84058f3b9653b85f5df0f48893b4da7757edda7b7c765aacfbd1e2993042431eeeb0464f05564666fdf2c3a19228df6ce37e08be74e12
SSDEEP

3072:0Lr5mtn6vGCZrY0dbkqnBa6XFOIGh+IhxXdOJFpuNRWQ4ChpDV+7YvFUn00y:0LNPrY01JnBB1DGhpOFpEKCzBbUDy

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2012 set thread context of 2068	2012	649090e57974205ccea8997f6284644b_JaffaCakes118.exe	30

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2000	2068	WerFault.exe	30

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 2012 wrote to memory of 2068	2012	649090e57974205ccea8997f6284644b_JaffaCakes118.exe	30
PID 2012 wrote to memory of 2068	2012	649090e57974205ccea8997f6284644b_JaffaCakes118.exe	30
PID 2012 wrote to memory of 2068	2012	649090e57974205ccea8997f6284644b_JaffaCakes118.exe	30
PID 2012 wrote to memory of 2068	2012	649090e57974205ccea8997f6284644b_JaffaCakes118.exe	30
PID 2012 wrote to memory of 2068	2012	649090e57974205ccea8997f6284644b_JaffaCakes118.exe	30
PID 2068 wrote to memory of 2000	2068	649090e57974205ccea8997f6284644b_JaffaCakes118.exe	31
PID 2068 wrote to memory of 2000	2068	649090e57974205ccea8997f6284644b_JaffaCakes118.exe	31
PID 2068 wrote to memory of 2000	2068	649090e57974205ccea8997f6284644b_JaffaCakes118.exe	31
PID 2068 wrote to memory of 2000	2068	649090e57974205ccea8997f6284644b_JaffaCakes118.exe	31

memory/2068-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download