a861eef3b3ab7bc941bb820892a33571d16fccb73ebba17d1062b907b30e6ef7

Analysis

max time kernel
138s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 20:39

Target

64b0c5e585dd8260b1867e193c581075_JaffaCakes118.exe
Size

487KB
MD5

64b0c5e585dd8260b1867e193c581075
SHA1

982210cbd951cfd474b4fce7a38bb6b451872f84
SHA256

a861eef3b3ab7bc941bb820892a33571d16fccb73ebba17d1062b907b30e6ef7
SHA512

7b414937558631d71add6dc601ebe79f8ca7de99d8e3fe5582f1ca7b4aeee6f3ac484597cc49e4299efb19041f0ec430bfc1be9756fbcbacb535d21f17fa301c
SSDEEP

12288:IvOos7XPOkGFQ/ujd+GMv9OaVsU86EM4ShhIAm:IvOZ7nGm/Yd+GM1aL6EM3htm

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3524 1508 WerFault.exe 64b0c5e585dd8260b1867e193c581075_JaffaCakes118.exe

pid	pid_target	process	target process
3524	1508	WerFault.exe	64b0c5e585dd8260b1867e193c581075_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\64b0c5e585dd8260b1867e193c581075_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\64b0c5e585dd8260b1867e193c581075_JaffaCakes118.exe"
1⤵
PID:1508
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1508 -s 332
  2⤵
  - Program crash
  PID:3524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1508 -ip 1508
1⤵
PID:1524

memory/1508-0-0x0000000000BC0000-0x0000000000C3E000-memory.dmp

Filesize
504KB

Download