14d32fba4144ef44d04b5509b2774bc519be011d0f4d5eefbe1e2ffaf38f4dcf

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 00:14

Target

691b286b61e3029f0f8550e856483016_JaffaCakes118.exe
Size

835KB
MD5

691b286b61e3029f0f8550e856483016
SHA1

87df7662bbc7a9ddb181752635e0558e5375c001
SHA256

14d32fba4144ef44d04b5509b2774bc519be011d0f4d5eefbe1e2ffaf38f4dcf
SHA512

06f4cb06a80973691cd3fc3b3b81e49c1ca61f31f6108b4d5bc2b68425337310a64475b4f487067572392cd32362deb49a3e4add35e7f2b8f0fd43376266c91b
SSDEEP

24576:QUeZD/lHo9PRfCJ353ed1UzN9Z3b3OQzVGWz+WJj8NT:QFbHiClVe3UzN9Z3bOQ4WCUs

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4312 1468 WerFault.exe 691b286b61e3029f0f8550e856483016_JaffaCakes118.exe

pid	pid_target	process	target process
4312	1468	WerFault.exe	691b286b61e3029f0f8550e856483016_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\691b286b61e3029f0f8550e856483016_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\691b286b61e3029f0f8550e856483016_JaffaCakes118.exe"
1⤵
PID:1468

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1468 -s 492
2⤵
- Program crash
PID:4312

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1468 -ip 1468
1⤵
PID:4940

memory/1468-2-0x0000000000401000-0x000000000040B000-memory.dmp

Filesize
40KB

Download
memory/1468-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1468-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download