c9700e31d185d1c94238c32a3ec2638a3c19b8f410968fe8587d13e1eea667f3

Analysis

max time kernel
92s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
18/04/2024, 10:03

Target

f7c3dafc3d93a4ae95954190a0244290_JaffaCakes118.exe
Size

178KB
MD5

f7c3dafc3d93a4ae95954190a0244290
SHA1

4c92d786281c4a5a6655c61e925302f6547363f0
SHA256

c9700e31d185d1c94238c32a3ec2638a3c19b8f410968fe8587d13e1eea667f3
SHA512

0791dbc1e4966fbea1cb058291588f202418c56e04000438036e6bfbf636efb4b430ba3e5cd8376e3483fc288649d8f8d36fd6a4c4652c504129ec3fc24fd58f
SSDEEP

3072:B3KU0uwRWvrVuRn/km7g/GLDGn+4uEhfu9kGLvSN2xZ5mZ4uNXaYFunUerB3dU4C:HwRWvJu9pIGGn+zEDYNxbme6X7KUeV3N

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/864-0-0x0000000000400000-0x000000000043E000-memory.dmp	upx
behavioral2/memory/864-2-0x0000000000400000-0x000000000043E000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
872	864	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\f7c3dafc3d93a4ae95954190a0244290_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f7c3dafc3d93a4ae95954190a0244290_JaffaCakes118.exe"
1⤵
PID:864
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 864 -s 328
  2⤵
  - Program crash
  PID:872

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 864 -ip 864
1⤵
PID:632

memory/864-0-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download
memory/864-1-0x0000000000450000-0x0000000000464000-memory.dmp

Filesize
80KB

Download
memory/864-2-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download