9d0acc3a63c903a458ff90edd7df16c9666b5398420a7138771bf214dd12afbe

Analysis

max time kernel
147s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08-04-2024 18:33

Target

e8225d59a252015cc4dfb8140c00b3ad_JaffaCakes118.exe
Size

24KB
MD5

e8225d59a252015cc4dfb8140c00b3ad
SHA1

f170a785b1d58e14c54c4e0a00fba705700c0e22
SHA256

9d0acc3a63c903a458ff90edd7df16c9666b5398420a7138771bf214dd12afbe
SHA512

c43380f0bfbfef7211a6002a880fb215966a81e91cdb6de28494bf7a3f025ddf1964cd2f5f6000f2ecb6ec825fe4cb980f9a25bdbf759192932d5f48aa5d59e1
SSDEEP

384:E3eVES+/xwGSRKJQ4DblM61qmTTMVF9/q5Z0:bGS+Zf1JZbO8qYoAm

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2488	3948	WerFault.exe	84

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3948	e8225d59a252015cc4dfb8140c00b3ad_JaffaCakes118.exe
3948	e8225d59a252015cc4dfb8140c00b3ad_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\e8225d59a252015cc4dfb8140c00b3ad_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\e8225d59a252015cc4dfb8140c00b3ad_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3948
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3948 -s 460
  2⤵
  - Program crash
  PID:2488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 3948 -ip 3948
1⤵
PID:1644