fff5e376e151572cef18e36462f5f447d9be2e832150e3abcf6d530f3e535c13

Analysis

max time kernel
139s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
19-06-2024 23:52

Target

0146d3c833a2c25614672ff6ebb6c8b3_JaffaCakes118.exe
Size

280KB
MD5

0146d3c833a2c25614672ff6ebb6c8b3
SHA1

4032928ff9351715dfb209acb3f122a6f6d7d2fb
SHA256

fff5e376e151572cef18e36462f5f447d9be2e832150e3abcf6d530f3e535c13
SHA512

ba1107bd52e3dd471ec5e56e187d3253f7ccd47b2baaf33856c79df9adf9af41c4deb1195c802959c4231a3c71109364f886f4c57121da8b38723004d493076b
SSDEEP

6144:fnIpydVsZyxyK5R8GYKi1Xfvs1tzH51t+ewSReXNU/:PuydfiebO6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2292	700	WerFault.exe	81

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
700	0146d3c833a2c25614672ff6ebb6c8b3_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0146d3c833a2c25614672ff6ebb6c8b3_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0146d3c833a2c25614672ff6ebb6c8b3_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:700
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 700 -s 464
  2⤵
  - Program crash
  PID:2292

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 700 -ip 700
1⤵
PID:2232