862616bd9a7bc9c87aad62b5ca808d238051ac0c6f22f7ec9892d9669dc32e37

Analysis

max time kernel
92s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11/04/2024, 01:03

Target

ec5d108283bb9e261ef228d5909dd755_JaffaCakes118.exe
Size

59KB
MD5

ec5d108283bb9e261ef228d5909dd755
SHA1

4c6bad585dcdc6b06973d492f99ab63d2ec2fce6
SHA256

862616bd9a7bc9c87aad62b5ca808d238051ac0c6f22f7ec9892d9669dc32e37
SHA512

9653846be9018eee08d320f23508d3672088485453619f020474f98e0b0f218293d8478a8583f660a8319ad5d7de2aecc381f1a10dcd2fec39525ff3db672d45
SSDEEP

1536:XLE04YnCDHzw9lWgPwO7DfBl56yD7VTz:7E046Gz4lDwO/dR1z

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3604-0-0x0000000000400000-0x000000000042C000-memory.dmp	upx
behavioral2/memory/3604-2-0x0000000000400000-0x000000000042C000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4712	3604	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\ec5d108283bb9e261ef228d5909dd755_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ec5d108283bb9e261ef228d5909dd755_JaffaCakes118.exe"
1⤵
PID:3604
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3604 -s 256
  2⤵
  - Program crash
  PID:4712

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3604 -ip 3604
1⤵
PID:3052

memory/3604-0-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/3604-1-0x00000000005C0000-0x00000000005C1000-memory.dmp

Filesize
4KB

Download
memory/3604-2-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download