d73edb11c1597d9dc64545f079c230911e5505489e68aa1575153430b273a18d

Analysis

max time kernel
132s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27-05-2024 00:33

Target

7754480cc3b682654a4f308a3e52e85e_JaffaCakes118.exe
Size

456KB
MD5

7754480cc3b682654a4f308a3e52e85e
SHA1

0d74e814ee7dbbc89bd1b7a9b89d2227ed3a0334
SHA256

d73edb11c1597d9dc64545f079c230911e5505489e68aa1575153430b273a18d
SHA512

ca63723516ed053f1e88a32f0141697435a468b27cacd2fa86af3ed2ef54cf4ed7e6ab65e5959a5f544a2536a34940aea77abfa3a34db80c0ae6a610ba47ac45
SSDEEP

12288:WrnGiEfgZaBdxhNiucVJGTOdqFL6LZkrcWkbl:knGimSAbqvQF2eQ5

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1056 4772 WerFault.exe 7754480cc3b682654a4f308a3e52e85e_JaffaCakes118.exe

pid	pid_target	process	target process
1056	4772	WerFault.exe	7754480cc3b682654a4f308a3e52e85e_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\7754480cc3b682654a4f308a3e52e85e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7754480cc3b682654a4f308a3e52e85e_JaffaCakes118.exe"
1⤵
PID:4772

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4772 -s 264
2⤵
- Program crash
PID:1056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4772 -ip 4772
1⤵
PID:4016

memory/4772-0-0x0000000001F70000-0x0000000001F72000-memory.dmp

Filesize
8KB

Download
memory/4772-2-0x0000000002170000-0x0000000002171000-memory.dmp

Filesize
4KB

Download
memory/4772-1-0x00000000020D0000-0x000000000212B000-memory.dmp

Filesize
364KB

Download