54c377cb790b0f648cc5085f77e90be85295d50c1545b32813e3f820a86b71c2

Analysis

max time kernel
120s
max time network
115s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
18-04-2024 01:18

Target

f6fb9c27e5185fb55db48e4e80cb343a_JaffaCakes118.exe
Size

50KB
MD5

f6fb9c27e5185fb55db48e4e80cb343a
SHA1

149c1f7a4902141562dbd6f374b53d527be72af6
SHA256

54c377cb790b0f648cc5085f77e90be85295d50c1545b32813e3f820a86b71c2
SHA512

93eb9c390a7787ca2e752eb665da181172f5632281cab6a2e7f4465aa4e7a3b6b288bffe881268466aa8301833b25a460395d40eee0d4ca293e6c11feb47f940
SSDEEP

768:etf9cmxzmIeu+Bjs3ax4DsE/FmpI6VtITnhfO8lkChFK6yVx2HAR9t7sig5:etfmMzmIefBjs3KDkm4hmOkChKmAGi

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
2164	4664	WerFault.exe	f6fb9c27e5185fb55db48e4e80cb343a_JaffaCakes118.exe
5000	4664	WerFault.exe	f6fb9c27e5185fb55db48e4e80cb343a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f6fb9c27e5185fb55db48e4e80cb343a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f6fb9c27e5185fb55db48e4e80cb343a_JaffaCakes118.exe"
1⤵
PID:4664

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4664 -s 516
2⤵
- Program crash
PID:2164

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4664 -s 556
2⤵
- Program crash
PID:5000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4664 -ip 4664
1⤵
PID:1676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 4664 -ip 4664
1⤵
PID:3548

memory/4664-0-0x0000000013140000-0x000000001317D000-memory.dmp

Filesize
244KB

Download
memory/4664-1-0x0000000013140000-0x000000001317D000-memory.dmp

Filesize
244KB

Download