9fda87f8b6be8ceab857327817f5abb88851efcb7e439946060c34534f40e144

Analysis

max time kernel
138s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
20-06-2024 16:28

Target

07be859cc44ff1816519f1d0ab17d252_JaffaCakes118.exe
Size

61KB
MD5

07be859cc44ff1816519f1d0ab17d252
SHA1

104b60c8e423e077cbbcb1a5d02f665ec18ac82d
SHA256

9fda87f8b6be8ceab857327817f5abb88851efcb7e439946060c34534f40e144
SHA512

b53b7e02dc325f10ebf532e4ce7541b5dac2477b47378fee968b10c1abcace943af47ad20df39ee7ef608ec5e7ac5857f9dfc28996c5663cea54a3d274fe605b
SSDEEP

1536:grQytPGTNzda50nYw9IiTHpxK1239vbhOjVH16CFq5Z1EeP9n00yCP:GQy9GT95dKirpe239zhOjVVq1Emr

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3560-0-0x0000000000400000-0x0000000000456200-memory.dmp	upx
behavioral2/memory/3560-1-0x0000000000400000-0x0000000000456200-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3836	3560	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\07be859cc44ff1816519f1d0ab17d252_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\07be859cc44ff1816519f1d0ab17d252_JaffaCakes118.exe"
1⤵
PID:3560
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3560 -s 448
  2⤵
  - Program crash
  PID:3836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3560 -ip 3560
1⤵
PID:3696

memory/3560-0-0x0000000000400000-0x0000000000456200-memory.dmp

Filesize
344KB

Download
memory/3560-1-0x0000000000400000-0x0000000000456200-memory.dmp

Filesize
344KB

Download