3ba1ab7614c5a74e4ad9f0c8f095e45a8bc9125be155f63a8a2bb70e7492931a

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
10-05-2024 12:41

Target

2f27b0e0ee037e581998f46831cea56f_JaffaCakes118.exe
Size

525KB
MD5

2f27b0e0ee037e581998f46831cea56f
SHA1

995c806d677bb4df3274134a964c180ecbc1d173
SHA256

3ba1ab7614c5a74e4ad9f0c8f095e45a8bc9125be155f63a8a2bb70e7492931a
SHA512

e4302cd050f1957649396a615ed744f7357cc93bd7e43c09353c0717e0b73bfd00f84854cf8ea407d3c59f130931369b8e28929bb7b2dfe0174073bc952285f5
SSDEEP

12288:ybFrtOHXOrBzgflqhCfqZM/KXYYI2IvZbFP:cFrtO3OrBuRfqM4IDvRF

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4876 980 WerFault.exe 2f27b0e0ee037e581998f46831cea56f_JaffaCakes118.exe

pid	pid_target	process	target process
4876	980	WerFault.exe	2f27b0e0ee037e581998f46831cea56f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\2f27b0e0ee037e581998f46831cea56f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2f27b0e0ee037e581998f46831cea56f_JaffaCakes118.exe"
1⤵
PID:980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 980 -s 264
2⤵
- Program crash
PID:4876

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 980 -ip 980
1⤵
PID:976

memory/980-0-0x00000000020C0000-0x000000000212D000-memory.dmp

Filesize
436KB

Download
memory/980-1-0x0000000002180000-0x0000000002181000-memory.dmp

Filesize
4KB

Download