50db404ce70b31060c7215cab55adf54e240f11292f155cab62638a27ae1bff8

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 02:03

Target

69624f58cb297be161b35e6d15690381_JaffaCakes118.exe
Size

367KB
MD5

69624f58cb297be161b35e6d15690381
SHA1

812aa6683fd7ba688fbce15c9ee176494d61ff98
SHA256

50db404ce70b31060c7215cab55adf54e240f11292f155cab62638a27ae1bff8
SHA512

ce0c0dc256020c63233b3307a2025c0656ee39a8bb992b1d852d2831609ae4de2040dd59059a28bb4598b8516ffc28e0b9e239b5003b48e9f1250d9611762648
SSDEEP

6144:rpEcAd/Mm5ZkyUneRTnJOmQ4W4/6zA5K0TzJRCp4xRvKUllD/W13+p:rTAOm5eyUnJmCzAXTzJR3RvK6lCwp

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

216 4744 WerFault.exe 69624f58cb297be161b35e6d15690381_JaffaCakes118.exe

pid	pid_target	process	target process
216	4744	WerFault.exe	69624f58cb297be161b35e6d15690381_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\69624f58cb297be161b35e6d15690381_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\69624f58cb297be161b35e6d15690381_JaffaCakes118.exe"
1⤵
PID:4744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4744 -s 332
2⤵
- Program crash
PID:216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4744 -ip 4744
1⤵
PID:4772

memory/4744-0-0x00000000004C0000-0x0000000000520000-memory.dmp

Filesize
384KB

Download