0de01536b62d62eccfb585e99ac8d8ef9049815edc6f053217438231f43a5db4

Analysis

max time kernel
133s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 02:46

Target

65be0406c7b04116e26664248cca29ca_JaffaCakes118.exe
Size

810KB
MD5

65be0406c7b04116e26664248cca29ca
SHA1

62436c476e76d02f67675da9e82ee4ebc9fd0be0
SHA256

0de01536b62d62eccfb585e99ac8d8ef9049815edc6f053217438231f43a5db4
SHA512

1f34b452797b94223b5efd6a599ae0b9e12cac00fd04724a68e12a60d5ddb5434e046dffcfa38435ef320baf1818ceb36a1d67db88ade04bd28f16f99d5dc3da
SSDEEP

24576:rM0DFpuMtEo8WLyObzYxmW9RUmr3yg6sOHy4iF0brg:r4MtERWWfmW9/3yoOHy4iL

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1936 4744 WerFault.exe 65be0406c7b04116e26664248cca29ca_JaffaCakes118.exe

pid	pid_target	process	target process
1936	4744	WerFault.exe	65be0406c7b04116e26664248cca29ca_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\65be0406c7b04116e26664248cca29ca_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\65be0406c7b04116e26664248cca29ca_JaffaCakes118.exe"
1⤵
PID:4744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4744 -s 288
2⤵
- Program crash
PID:1936

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4744 -ip 4744
1⤵
PID:4632