6ed41cd52a53f5be8882e782291866343c3cdb4240826d8b0147a507e7c61e33

Analysis

max time kernel
143s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 03:39

Target

fbd758eb82bcf3802f9d524b1e2149e1_JaffaCakes118.exe
Size

176KB
MD5

fbd758eb82bcf3802f9d524b1e2149e1
SHA1

ba470ef12ced017be5dfea724340d2598a49c32c
SHA256

6ed41cd52a53f5be8882e782291866343c3cdb4240826d8b0147a507e7c61e33
SHA512

a823d64faf03dd8d4b966c42fe10824876ae55598b13795449492391aa0169545953fde9c763e8245a2a933011dff80a3d6ef048289052b79eabf936d9e1f6bf
SSDEEP

3072:eq4IcfpHlp1DbKcwjIU2aTObcpT/pHkEAbN/yK/fObT/bGiCV/COqoSQ5iBuAZd5:eq4PfpHlp1vKcwjIDaTObcZ/pHkMK/f0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2364	772	WerFault.exe	90

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
772	fbd758eb82bcf3802f9d524b1e2149e1_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\fbd758eb82bcf3802f9d524b1e2149e1_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fbd758eb82bcf3802f9d524b1e2149e1_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:772
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 772 -s 464
  2⤵
  - Program crash
  PID:2364

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 772 -ip 772
1⤵
PID:2028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3976 --field-trial-handle=2900,i,14549994492153927475,12895178890800740987,262144 --variations-seed-version /prefetch:8
1⤵
PID:3564