f5ce8ccdd3fd27dd773b9189fd5b51aca5ef180080217e2ef3acdf4cb155964f

Analysis

max time kernel
133s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
15-05-2024 20:53

Target

47fee9a8543ec57a36777380af0b14f2_JaffaCakes118.exe
Size

1024KB
MD5

47fee9a8543ec57a36777380af0b14f2
SHA1

cd5f671f1bf04e789141f6d80b7aa0112652ccb4
SHA256

f5ce8ccdd3fd27dd773b9189fd5b51aca5ef180080217e2ef3acdf4cb155964f
SHA512

d5082fe02a345e668c724cdc3b200e85003919d4dbc21f8490f0d7424b7fd14a9ee9805f9ff7e9823c19516fefdb5d56ff43a5612b400b8e4968e73637bff3a5
SSDEEP

12288:twPXKYnQFu0RDuiG917Up4gbdrrbxRZccYVuJXiEQ6dJk7:twXKYQFugZG9Gp4gbhxgc9V7Q7

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2952	1268	WerFault.exe	81
1312	1268	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\47fee9a8543ec57a36777380af0b14f2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\47fee9a8543ec57a36777380af0b14f2_JaffaCakes118.exe"
1⤵
PID:1268
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1268 -s 220
  2⤵
  - Program crash
  PID:2952
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1268 -s 264
  2⤵
  - Program crash
  PID:1312

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1268 -ip 1268
1⤵
PID:4632

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 1268 -ip 1268
1⤵
PID:3260