149bb0a0d4e64634c55130201e156457ead026dfa76828035aecdd0fa79d5b3b

Analysis

max time kernel
147s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
27-04-2024 01:56

Target

02276072c4d7b1e8ba001e142b1a376f_JaffaCakes118.exe
Size

794KB
MD5

02276072c4d7b1e8ba001e142b1a376f
SHA1

80dab902444f06d3247e9bc163dbad9e4a32e99f
SHA256

149bb0a0d4e64634c55130201e156457ead026dfa76828035aecdd0fa79d5b3b
SHA512

7c1140ddb586db1c69009d6bbb6d03f7579c10d921c4693599e90899bdf6fe8b01ec1d50731f4631a4de7fa98501ae4ac0a11485acd2870a4efac29c6083fbcf
SSDEEP

12288:nFHGUUUcskP1SER/hdC/b8TpdLHfVobGemxqvYi16Z5vuMo6523fwT2+pHTE3:nFHVJkNj/i4TpZ/VobJOg66MN5O8NTK

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4860	2912	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\02276072c4d7b1e8ba001e142b1a376f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\02276072c4d7b1e8ba001e142b1a376f_JaffaCakes118.exe"
1⤵
PID:2912
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2912 -s 488
  2⤵
  - Program crash
  PID:4860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2912 -ip 2912
1⤵
PID:1064

memory/2912-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2912-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2912-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download