04c0f6fab5b760c39cc91d815f20dd9f8c887100cb463a3cf937f0f98d1c6241

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
14-06-2024 21:27

Target

ab8b14f6743954d16eb4e2dfa50d7a93_JaffaCakes118.exe
Size

855KB
MD5

ab8b14f6743954d16eb4e2dfa50d7a93
SHA1

ced3952cb64139964b8cce9223240f502341402e
SHA256

04c0f6fab5b760c39cc91d815f20dd9f8c887100cb463a3cf937f0f98d1c6241
SHA512

0e90939185b230d5187ef68b72be5e5e58f0596b9f876a83cf5ef0efa3981b65967e9c0a2ca17be4f7d85a89bc2eac54703326a033e17186a3276685f64b02ac
SSDEEP

12288:HsCpuY2IjldfB7Lhw7GGW4QXkL5rMp6CK6SpirAC7gt6UiFfwT2+pHTER:HsC72IjPJ7aiGWBULG6Ndp0i61l8NTk

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5032	1880	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\ab8b14f6743954d16eb4e2dfa50d7a93_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ab8b14f6743954d16eb4e2dfa50d7a93_JaffaCakes118.exe"
1⤵
PID:1880
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1880 -s 484
  2⤵
  - Program crash
  PID:5032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1880 -ip 1880
1⤵
PID:4420

memory/1880-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/1880-3-0x0000000000401000-0x000000000040B000-memory.dmp

Filesize
40KB

Download
memory/1880-5-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download