931eb5ae791991f7ace322ce21f3639c060436af7b7376eb28ebbb2f2cf4c833

Analysis

max time kernel
130s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 19:52

Target

686b6813e2f24e6e61afe74e9ed1642d_JaffaCakes118.exe
Size

554KB
MD5

686b6813e2f24e6e61afe74e9ed1642d
SHA1

cbf55d857f1816056bb2849308c9196e8115b821
SHA256

931eb5ae791991f7ace322ce21f3639c060436af7b7376eb28ebbb2f2cf4c833
SHA512

a67eac318d9947efa6d8dc1919c8026110fd62efd3f0978a5424857349e95287b3b30733be3816efe6c9458d2c35fb12fa6b05b086ffbd7abc4c183663d2fa56
SSDEEP

12288:YQjLuRE4xKR72qKoe/ZWsYUxUKQzZZQZsqtOqD:nLueaKR72qKoe/EhdKYavD

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4012 1100 WerFault.exe 686b6813e2f24e6e61afe74e9ed1642d_JaffaCakes118.exe

pid	pid_target	process	target process
4012	1100	WerFault.exe	686b6813e2f24e6e61afe74e9ed1642d_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\686b6813e2f24e6e61afe74e9ed1642d_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\686b6813e2f24e6e61afe74e9ed1642d_JaffaCakes118.exe"
1⤵
PID:1100

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1100 -s 284
2⤵
- Program crash
PID:4012

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1100 -ip 1100
1⤵
PID:1480