16fcb493f6ad429cef3d846513b2efa89750a23698de34fe3db47178b4c58273

Analysis

max time kernel
142s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
10-05-2024 09:16

Target

2e6944ef117bb9233578516753f46fca_JaffaCakes118.exe
Size

797KB
MD5

2e6944ef117bb9233578516753f46fca
SHA1

e65427eb00e406dfb3215beb08e08b1934487bcf
SHA256

16fcb493f6ad429cef3d846513b2efa89750a23698de34fe3db47178b4c58273
SHA512

4d6328aa06717e0922f38481bd8c4040e4b67dcb2181d9bcadbeaf7495c7e7c4d175bc04dd3b3d66f637a5237b2f7632193bc169a234a27ad8453e2c692abd84
SSDEEP

12288:/Ejp5yoxRzUxOjS3/DxTxDvMkuxo9WlFhCHA1a8d1ZqlJIa4rtfwT2+pHTED:/EjbBUcCnDUkUoqfmAc8d1kZ4rt8NT6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4080	644	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\2e6944ef117bb9233578516753f46fca_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2e6944ef117bb9233578516753f46fca_JaffaCakes118.exe"
1⤵
PID:644
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 644 -s 464
  2⤵
  - Program crash
  PID:4080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 644 -ip 644
1⤵
PID:3008

memory/644-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/644-3-0x0000000000401000-0x000000000040B000-memory.dmp

Filesize
40KB

Download
memory/644-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download