622246bda294bb00cdf6592451a82e02f2f1ccf85a3a9e049e5ebff886fd1afc

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
23/07/2024, 09:28

Target

670405bea2abbad6265974744e99b827_JaffaCakes118.exe
Size

74KB
MD5

670405bea2abbad6265974744e99b827
SHA1

904526e4f8a60206a7ba04f53d5a449e2451f19a
SHA256

622246bda294bb00cdf6592451a82e02f2f1ccf85a3a9e049e5ebff886fd1afc
SHA512

629d32416f3012d48fc9eddb282162ae90fac777b4e213c9f015ce190b2993e9898faea43f43af54af67b0dbb860ceef180ddf18ac553550e4fdc972dc8b25d6
SSDEEP

1536:ip7C0kx1jtMdh9oUecPnE19dkz3dxPUBHp7R+8wnosZdQJZeSAvDBZUT:E7CFbW9o5ck9GIBHPunoEdQJZv6NZUT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1844	1744	WerFault.exe	30

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1744 wrote to memory of 1844	1744	670405bea2abbad6265974744e99b827_JaffaCakes118.exe	31
PID 1744 wrote to memory of 1844	1744	670405bea2abbad6265974744e99b827_JaffaCakes118.exe	31
PID 1744 wrote to memory of 1844	1744	670405bea2abbad6265974744e99b827_JaffaCakes118.exe	31
PID 1744 wrote to memory of 1844	1744	670405bea2abbad6265974744e99b827_JaffaCakes118.exe	31

C:\Users\Admin\AppData\Local\Temp\670405bea2abbad6265974744e99b827_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\670405bea2abbad6265974744e99b827_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1744
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1744 -s 92
  2⤵
  - Program crash
  PID:1844