8ea698ba1c0ec0fb2e9c296657bf497b118877b9443ca1f7f9e7b11676aae721

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
23-07-2024 11:59

Target

67814f2ff8401995ce62aa1d4b8dc742_JaffaCakes118.exe
Size

388KB
MD5

67814f2ff8401995ce62aa1d4b8dc742
SHA1

88c640045ea4154434c4573863305bf4a94a33d9
SHA256

8ea698ba1c0ec0fb2e9c296657bf497b118877b9443ca1f7f9e7b11676aae721
SHA512

1550554478b58722c81dc8354950c31b12aea8170a7e8ea89f75c42047f1fac284256613db409801c00f676cc723dae95c9df282b5914f40b5a395de820376ba
SSDEEP

3072:e2voeN+jaiG17Ef5KlrKnBZ59oZSmveDlcjIV8jlwIIU+V4EFFCcll3H3rH3XD7U:ZQeNai17Y56rKnBfWhveajzxwIIU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2316	1920	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1920 wrote to memory of 2316	1920	67814f2ff8401995ce62aa1d4b8dc742_JaffaCakes118.exe	31
PID 1920 wrote to memory of 2316	1920	67814f2ff8401995ce62aa1d4b8dc742_JaffaCakes118.exe	31
PID 1920 wrote to memory of 2316	1920	67814f2ff8401995ce62aa1d4b8dc742_JaffaCakes118.exe	31
PID 1920 wrote to memory of 2316	1920	67814f2ff8401995ce62aa1d4b8dc742_JaffaCakes118.exe	31

C:\Users\Admin\AppData\Local\Temp\67814f2ff8401995ce62aa1d4b8dc742_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\67814f2ff8401995ce62aa1d4b8dc742_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1920
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1920 -s 100
  2⤵
  - Program crash
  PID:2316