c645429c6ffc2526f4025a958b9e3d55255b47a55c7cdb8b2c8f3d218bfe5fc4

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/04/2024, 10:20

Target

e9c532e7d0c877ccb02b7923fc37d33e_JaffaCakes118.exe
Size

702KB
MD5

e9c532e7d0c877ccb02b7923fc37d33e
SHA1

515ef6c7b8db6c718438e69553e3ad45e8844cce
SHA256

c645429c6ffc2526f4025a958b9e3d55255b47a55c7cdb8b2c8f3d218bfe5fc4
SHA512

a84f65493678e42804876e68aa63aca8c1f03ee19abba804350f572136128bb92dd588d193156a0bc806e7242b1d3d62776ecd8978b1955849223e48e74c5611
SSDEEP

12288:8HuceL8hB+oQ8oTZECQ1b2Xf41DqV2qz/OttOI9k:Nn8hB+oQzpD4lqV2qz/Ov9k

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
408	4028	WerFault.exe	84
1612	4028	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\e9c532e7d0c877ccb02b7923fc37d33e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\e9c532e7d0c877ccb02b7923fc37d33e_JaffaCakes118.exe"
1⤵
PID:4028
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4028 -s 252
  2⤵
  - Program crash
  PID:408
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4028 -s 300
  2⤵
  - Program crash
  PID:1612

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4028 -ip 4028
1⤵
PID:4528

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 4028 -ip 4028
1⤵
PID:2780