bd74e0da3edebaa2c46eec090f3383c51dd2a533d1ad893cd81f29f593331a44

Analysis

max time kernel
147s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
28-04-2024 03:12

Target

043f979248ab92c86091e4a5d33b4b8c_JaffaCakes118.exe
Size

1.0MB
MD5

043f979248ab92c86091e4a5d33b4b8c
SHA1

58c55f2a5ed700444934d3520984f425b858b596
SHA256

bd74e0da3edebaa2c46eec090f3383c51dd2a533d1ad893cd81f29f593331a44
SHA512

a2e76150059bc3312e584b4880c3b4d05636311794ee5d6f0b9cb87bee82aaa3b97a99b0687ad75ff4aff516765f57db3593fef4a70ee6c8addd6d4a56457ccd
SSDEEP

24576:HmOR2/81y4ELxHYpliDmTjVRJ1hVQK8mJLn95odx3tO:H1yxGniDSRJ1oK809WdBtO

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1520	1580	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1580	043f979248ab92c86091e4a5d33b4b8c_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\043f979248ab92c86091e4a5d33b4b8c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\043f979248ab92c86091e4a5d33b4b8c_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1580
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1580 -s 396
  2⤵
  - Program crash
  PID:1520

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1580 -ip 1580
1⤵
PID:3096

memory/1580-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/1580-1-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download