f0310bd22ecd3b724ba2b1aa041d158d68ceab0eb7a6c3d51b159acc7f99b19e

Analysis

max time kernel
125s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19-04-2024 09:11

Target

f9fa9baf15fdafbd54da52a5d4a84986_JaffaCakes118.exe
Size

36KB
MD5

f9fa9baf15fdafbd54da52a5d4a84986
SHA1

ed61ec496ce20703a2abe4404dcc494c575d0c80
SHA256

f0310bd22ecd3b724ba2b1aa041d158d68ceab0eb7a6c3d51b159acc7f99b19e
SHA512

8bc70cbf75719eef4faa52d2fcc4cf3ba842f9ce258223e78e39202b45ddb631cae43f3a6cc4a9df28f30d911e3a908b5ef4c9705daac3bf93ac032266a2c7eb
SSDEEP

768:jxFfrcZ1m4xP7tUEACdX2ImZal5fvzQMpNbfdYdeb:YF9BdACCZC5frQMpnqE

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2816-0-0x0000000000400000-0x000000000043D000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4808	2816	WerFault.exe	89

C:\Users\Admin\AppData\Local\Temp\f9fa9baf15fdafbd54da52a5d4a84986_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f9fa9baf15fdafbd54da52a5d4a84986_JaffaCakes118.exe"
1⤵
PID:2816
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2816 -s 180
  2⤵
  - Program crash
  PID:4808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2816 -ip 2816
1⤵
PID:4984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3688,i,14910875736531803530,4367035887674785793,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
1⤵
PID:4428

memory/2816-0-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download