cf3c52d17194c85db27a21f1fb5b757ba69b9cd78f06d03f83ab754a58478d36

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/04/2024, 16:55

Target

ea7744cbbdeac1e00bb2bb7a42f5cb39_JaffaCakes118.exe
Size

43KB
MD5

ea7744cbbdeac1e00bb2bb7a42f5cb39
SHA1

9dd745d489d259d946520ece6987579909593722
SHA256

cf3c52d17194c85db27a21f1fb5b757ba69b9cd78f06d03f83ab754a58478d36
SHA512

40c99a7f86f6048a85d6aed1e4792fca8359dc3f6ef2bfb8debcebd9a2ba5f9866a0e172becce321df30e08fbccfbc1da8f1115b00b1bd39127ee92bd0a9573c
SSDEEP

768:RPSaypiwDe3hLSSaTsbdB4FnYXQIqdQ+y0ShCC5yRga1Cwx9EA9BB7Whq:YayUwDgjfoYAdzy0/CkT1PyA9BB

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3664-0-0x0000000000400000-0x0000000000424000-memory.dmp	upx
behavioral2/memory/3664-1-0x0000000000400000-0x0000000000424000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4972	3664	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\ea7744cbbdeac1e00bb2bb7a42f5cb39_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ea7744cbbdeac1e00bb2bb7a42f5cb39_JaffaCakes118.exe"
1⤵
PID:3664
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3664 -s 472
  2⤵
  - Program crash
  PID:4972

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3664 -ip 3664
1⤵
PID:712

memory/3664-0-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download
memory/3664-1-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download