20542c5eab773a57e8b749bb097b605c4db43faa3cceae10b2bdfb124d6b639a

Analysis

max time kernel
129s
max time network
98s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 19:22

Target

685713cf0d1dac4346fb9fd8dc6dc143_JaffaCakes118.exe
Size

803KB
MD5

685713cf0d1dac4346fb9fd8dc6dc143
SHA1

43c2615412eec8db7283a053c4903270b95dd3e6
SHA256

20542c5eab773a57e8b749bb097b605c4db43faa3cceae10b2bdfb124d6b639a
SHA512

7734df74ed234896d2a799f56fa72ff82c62d78803569d9255232724bba76e616480d81e5c1a609bbc0afa4a293eb8bd98841aa49caadf5e5601553d5e5857fb
SSDEEP

24576:KRaV9GpisC6SUru0VF9qDHx8AdCm+98NT3:KUMiilR9qDRrCm+GL

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

872 1796 WerFault.exe 685713cf0d1dac4346fb9fd8dc6dc143_JaffaCakes118.exe

pid	pid_target	process	target process
872	1796	WerFault.exe	685713cf0d1dac4346fb9fd8dc6dc143_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\685713cf0d1dac4346fb9fd8dc6dc143_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\685713cf0d1dac4346fb9fd8dc6dc143_JaffaCakes118.exe"
1⤵
PID:1796
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1796 -s 452
  2⤵
  - Program crash
  PID:872

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1796 -ip 1796
1⤵
PID:4760

memory/1796-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/1796-3-0x0000000000401000-0x000000000040B000-memory.dmp

Filesize
40KB

Download
memory/1796-5-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download