2538e7d4bc9a10b9abab0c3a13f3680984f967b2314291334de6c506f54ad528

Analysis

max time kernel
144s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 12:51

Target

fccdc04ee89c15c2e7b16f55a0a0ab35_JaffaCakes118.exe
Size

610KB
MD5

fccdc04ee89c15c2e7b16f55a0a0ab35
SHA1

820b72ff0ddb6a92cf76827c1964b396887ebaf7
SHA256

2538e7d4bc9a10b9abab0c3a13f3680984f967b2314291334de6c506f54ad528
SHA512

bcf3f08e0b55f41f58c79bc84c1c9a0e2d75697c49d5653939a345ccecc02a08d2008ec06ddafd60256e1e2f18261b25c08254f025e60a1419d175b9c94e3407
SSDEEP

12288:GOu73KNUqD1Kp1bgSX4y9rPWi2t/pVthg7:lu73KNUhNgSXjjWth

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3168 2520 WerFault.exe fccdc04ee89c15c2e7b16f55a0a0ab35_JaffaCakes118.exe

pid	pid_target	process	target process
3168	2520	WerFault.exe	fccdc04ee89c15c2e7b16f55a0a0ab35_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\fccdc04ee89c15c2e7b16f55a0a0ab35_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fccdc04ee89c15c2e7b16f55a0a0ab35_JaffaCakes118.exe"
1⤵
PID:2520

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2520 -s 468
2⤵
- Program crash
PID:3168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2520 -ip 2520
1⤵
PID:3296