545c25bdd6d1a9cb3974974104bde506601c1e5738983869411897b91e6c0a24

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27-06-2024 17:12

Target

16d21f6bd48d0425a8d1e4fd0059b45c_JaffaCakes118.exe
Size

38KB
MD5

16d21f6bd48d0425a8d1e4fd0059b45c
SHA1

7cd44841eddb746946ba301613025dc092b2159d
SHA256

545c25bdd6d1a9cb3974974104bde506601c1e5738983869411897b91e6c0a24
SHA512

e48e126cde844e017d4e461b916207ba0fcb29c8d38b2cc2ae14349e741ee328f6c3c957abfac0369ff675a44a8f80e6778f627711079f79610535ce9b7a5ab9
SSDEEP

768:IkFZ0VdXeMaWDoOEN58MVkSJS0S0JEzuXCZWM+N1:IkUDXeM3pMTdS0GzuXAWM+N1

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2144 1296 WerFault.exe 16d21f6bd48d0425a8d1e4fd0059b45c_JaffaCakes118.exe

pid	pid_target	process	target process
2144	1296	WerFault.exe	16d21f6bd48d0425a8d1e4fd0059b45c_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

16d21f6bd48d0425a8d1e4fd0059b45c_JaffaCakes118.exe

description	pid	process	target process
PID 1296 wrote to memory of 2144	1296	16d21f6bd48d0425a8d1e4fd0059b45c_JaffaCakes118.exe	WerFault.exe
PID 1296 wrote to memory of 2144	1296	16d21f6bd48d0425a8d1e4fd0059b45c_JaffaCakes118.exe	WerFault.exe
PID 1296 wrote to memory of 2144	1296	16d21f6bd48d0425a8d1e4fd0059b45c_JaffaCakes118.exe	WerFault.exe
PID 1296 wrote to memory of 2144	1296	16d21f6bd48d0425a8d1e4fd0059b45c_JaffaCakes118.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\16d21f6bd48d0425a8d1e4fd0059b45c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\16d21f6bd48d0425a8d1e4fd0059b45c_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1296

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1296 -s 88
2⤵
- Program crash
PID:2144

memory/1296-0-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download
memory/1296-1-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download