155f8eabfe25025ab066898838f32f266641e947863db373b9b699d2c76407a1

Analysis

max time kernel
66s
max time network
53s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
27-04-2024 22:48

Target

03cd677ade795523079550780796e17f_JaffaCakes118.exe
Size

226KB
MD5

03cd677ade795523079550780796e17f
SHA1

0958a177a5ccae58bfa36283d543cafb57ea0d20
SHA256

155f8eabfe25025ab066898838f32f266641e947863db373b9b699d2c76407a1
SHA512

609beb89ee59cbc2adf1a6ed58ed4c26c311d7073c5c7a081e38c7d7dde7a049c4e6f9ebc04f73105cd86ea4681344aec72791fde29bfc38332c9c517a603063
SSDEEP

6144:GH8U95EB1TQ5iW3lf5k3ExI5DsG/CjB5R6IbPoFFWiWb:S8U9SB1ToR3Z5k0xI5DspjBX6KPSFQb

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

964 2848 WerFault.exe 03cd677ade795523079550780796e17f_JaffaCakes118.exe

pid	pid_target	process	target process
964	2848	WerFault.exe	03cd677ade795523079550780796e17f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\03cd677ade795523079550780796e17f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\03cd677ade795523079550780796e17f_JaffaCakes118.exe"
1⤵
PID:2848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2848 -s 292
2⤵
- Program crash
PID:964

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2848 -ip 2848
1⤵
PID:1480

memory/2848-0-0x0000000000AA0000-0x0000000000AB1000-memory.dmp

Filesize
68KB

Download