786fb6f8f0ae3bcb3833f1280c0612a32850e81bb207567e8de2b8641e328f9a

Analysis

max time kernel
93s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19/04/2024, 11:40

Target

fa38453a1bf1cb7c432ce6d2362106e4_JaffaCakes118.exe
Size

116KB
MD5

fa38453a1bf1cb7c432ce6d2362106e4
SHA1

676bb44fffaf0579c0a746d9cc1ec2f3636a3d03
SHA256

786fb6f8f0ae3bcb3833f1280c0612a32850e81bb207567e8de2b8641e328f9a
SHA512

457ab71c96a08d23a6147e62990c138d8ffca2272f8be95ca26555d93f819f9f8262f462ce46a93950e1df18935c20a1bff03e92873ba790a2a7eac358df0a17
SSDEEP

3072:hLMNQHRbQ1hg3+tbwEM6i3UweAy0dXCKWozkhB7X:hLMWH+43+JBi3UH09CK3zM

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4944	2468	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2468	fa38453a1bf1cb7c432ce6d2362106e4_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\fa38453a1bf1cb7c432ce6d2362106e4_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fa38453a1bf1cb7c432ce6d2362106e4_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2468
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2468 -s 424
  2⤵
  - Program crash
  PID:4944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2468 -ip 2468
1⤵
PID:4800