27c965763a68e2c0cc45c4ac7a2192979a71ee1dc7be5a010fa2428c3202277e

Analysis

max time kernel
51s
max time network
58s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
15/06/2024, 18:43

Target

afd5713cbadc2f1ab7dd4a990c53eb32_JaffaCakes118.exe
Size

1.0MB
MD5

afd5713cbadc2f1ab7dd4a990c53eb32
SHA1

30e851ee22c62cfb7940e5013ce0529f806cfb8b
SHA256

27c965763a68e2c0cc45c4ac7a2192979a71ee1dc7be5a010fa2428c3202277e
SHA512

934d6d7fa10ec1bd7a235b6b2d758c59a96478e867f58760a4f562f98b34299b93c7f35c3930871adb5087fab4573540220cf672565a98dde17ee872e383932f
SSDEEP

24576:yp4sPrS6bOsPKaVmsTqZEJvVpGioL2Nrf4aP3c6:yp44u0OsPxPAEJy92NsOc6

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2792	932	WerFault.exe	80
1336	932	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
932	afd5713cbadc2f1ab7dd4a990c53eb32_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\afd5713cbadc2f1ab7dd4a990c53eb32_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\afd5713cbadc2f1ab7dd4a990c53eb32_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:932
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 932 -s 420
  2⤵
  - Program crash
  PID:2792
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 932 -s 440
  2⤵
  - Program crash
  PID:1336

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 932 -ip 932
1⤵
PID:2000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 932 -ip 932
1⤵
PID:4112