38010309cc0e426d327b7a7148b994b27b9eee4fb95bce0c81ee48d1e6573ab6

Analysis

max time kernel
135s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
30/05/2024, 23:42

Target

85516ef764279fe731ef7e34edad0851_JaffaCakes118.exe
Size

1.5MB
MD5

85516ef764279fe731ef7e34edad0851
SHA1

1da7c255b7079a4348add2abb274dc5e7aa7aeeb
SHA256

38010309cc0e426d327b7a7148b994b27b9eee4fb95bce0c81ee48d1e6573ab6
SHA512

dcb9c7900e0a9dcea38185b59b24400d5a8577f97892ca50cfaa3d5d26bcdc936398646400c301326f1272512b8a224f1aeb7666dcb2d3b83c5c0b7bc32166bd
SSDEEP

24576:wUuZTW23/tWJ8J3f9w9SN2ZtCC5l/ae0UZy4VO5WnAstm7Gi/gZeqfxKRE3W6Zk:ITW23/tWJ4VwTtD5lN0UZy4VkWnvch/f

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3800	1336	WerFault.exe	84
5080	1336	WerFault.exe	84

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1336	85516ef764279fe731ef7e34edad0851_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\85516ef764279fe731ef7e34edad0851_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\85516ef764279fe731ef7e34edad0851_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1336
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1336 -s 440
  2⤵
  - Program crash
  PID:3800
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1336 -s 476
  2⤵
  - Program crash
  PID:5080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1336 -ip 1336
1⤵
PID:5016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1336 -ip 1336
1⤵
PID:4048