706839e88e2bbca6749cc5d0b30e866f9caaf308d404f9211a38bd750142d660

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
27-06-2024 12:38

Target

1609b4d78a08e024d9fadfbc82c7e961_JaffaCakes118.exe
Size

95KB
MD5

1609b4d78a08e024d9fadfbc82c7e961
SHA1

a0b4ee16e83e12d0560edd53c142873ae411b33e
SHA256

706839e88e2bbca6749cc5d0b30e866f9caaf308d404f9211a38bd750142d660
SHA512

868ebe422dfa777098425b18d5c04287dea52ec50599dd2d2191f51fdff2d67819434f586a0e6a2902cf3eeeca7835a849cbd9670d87a1443204798203e9e7d8
SSDEEP

768:g06R0UKzOgnKqGR7//GPc0LOBhvBrHks3IiyhDYQbGmxlNaM+WGa1wuxnzgOYw9Y:uR0vxn3Pc0LCH9MtbvabUDzJYWu3B

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1912 1440 WerFault.exe 1609b4d78a08e024d9fadfbc82c7e961_JaffaCakes118.exe

pid	pid_target	process	target process
1912	1440	WerFault.exe	1609b4d78a08e024d9fadfbc82c7e961_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

1609b4d78a08e024d9fadfbc82c7e961_JaffaCakes118.exe

description	pid	process	target process
PID 1440 wrote to memory of 1912	1440	1609b4d78a08e024d9fadfbc82c7e961_JaffaCakes118.exe	WerFault.exe
PID 1440 wrote to memory of 1912	1440	1609b4d78a08e024d9fadfbc82c7e961_JaffaCakes118.exe	WerFault.exe
PID 1440 wrote to memory of 1912	1440	1609b4d78a08e024d9fadfbc82c7e961_JaffaCakes118.exe	WerFault.exe
PID 1440 wrote to memory of 1912	1440	1609b4d78a08e024d9fadfbc82c7e961_JaffaCakes118.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\1609b4d78a08e024d9fadfbc82c7e961_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1609b4d78a08e024d9fadfbc82c7e961_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1440 -s 156
2⤵
- Program crash
PID:1912

memory/1440-0-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download
memory/1440-1-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download