6f1ad1628709f22d04611614ed48f80ff051bb1253ca26a3f99d8dabcc828661

Analysis

max time kernel
125s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
17-06-2024 05:42

Target

b70799c95dd29b4f2d5be5bc7feecf34_JaffaCakes118.exe
Size

261KB
MD5

b70799c95dd29b4f2d5be5bc7feecf34
SHA1

a5e33928c0c0d69bf70463ba5ec0935f53a941d8
SHA256

6f1ad1628709f22d04611614ed48f80ff051bb1253ca26a3f99d8dabcc828661
SHA512

d17d48045e8298a53e7f5406ebeb91e1425b43b32e9d9445c61d2373f673ee18846287a3d7f6a279d8468e680cf4247f1bb2fee40a2a834d6f0b997d2a77325c
SSDEEP

6144:QinCSbUlS2EqPgZXD3romJDq0orQWau0Vj6he+a9:QinCEpwYD7e0osRHEU/

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

896 4160 WerFault.exe b70799c95dd29b4f2d5be5bc7feecf34_JaffaCakes118.exe

pid	pid_target	process	target process
896	4160	WerFault.exe	b70799c95dd29b4f2d5be5bc7feecf34_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\b70799c95dd29b4f2d5be5bc7feecf34_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b70799c95dd29b4f2d5be5bc7feecf34_JaffaCakes118.exe"
1⤵
PID:4160
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4160 -s 620
  2⤵
  - Program crash
  PID:896

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4160 -ip 4160
1⤵
PID:2588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4088,i,10925946972013221578,8820669985803190952,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
1⤵
PID:4564