be2624b458d6b460e6a545f38879cc51c9751cd3ed02de68da82cf6b5f02522f

Analysis

max time kernel
137s
max time network
107s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 20:39

Target

688d75454404b80e594b8a4d790e7009_JaffaCakes118.exe
Size

429KB
MD5

688d75454404b80e594b8a4d790e7009
SHA1

5f04e75080302d5e31abf351f71ef42c433d5025
SHA256

be2624b458d6b460e6a545f38879cc51c9751cd3ed02de68da82cf6b5f02522f
SHA512

7f3dd2f1622cb36b1bebed0cdaa0bd6b7e86b633772e9b8b6a08a489c94511c517e0af9c463f9cd26fc6fc3ef97fa5b07fae83b729fdc829e466b18cf0d085a5
SSDEEP

6144:AYbWW2WDmyUUqK5EhEMDMg48Td50WKtNvGRNxw8QUY:AhWjmyUUqK5j030TyNC8Q

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1900 4272 WerFault.exe 688d75454404b80e594b8a4d790e7009_JaffaCakes118.exe

pid	pid_target	process	target process
1900	4272	WerFault.exe	688d75454404b80e594b8a4d790e7009_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\688d75454404b80e594b8a4d790e7009_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\688d75454404b80e594b8a4d790e7009_JaffaCakes118.exe"
1⤵
PID:4272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4272 -s 332
2⤵
- Program crash
PID:1900

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4272 -ip 4272
1⤵
PID:3724

memory/4272-0-0x0000000000930000-0x00000000009A0000-memory.dmp

Filesize
448KB

Download