49da8cc3b01de6f107ddac8c045365261daa3f27606972f1bbf6309e1211732c

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
24/06/2024, 01:35

Target

06f0815ee28e1df30d4e7b7301ba461a_JaffaCakes118.exe
Size

10.7MB
MD5

06f0815ee28e1df30d4e7b7301ba461a
SHA1

64a8e151d316600be5352abe4bfb3aa60afed203
SHA256

49da8cc3b01de6f107ddac8c045365261daa3f27606972f1bbf6309e1211732c
SHA512

280a310bfec3ba007110386edf0bd9d177e1247ef6e8919b7841343e6ac85cd70ad5df56a0ee1c1877e0118896dbefc1789970d1f815049c65d5b50abd411844
SSDEEP

196608:5u5MnBIHQjcAIYeHJ2JOEWj75Tg2ovfuNmVKo3KAUoO6frSzrep:5uAIHQjKHJbEWj+29NycftDap

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2316	316	WerFault.exe	80
1604	316	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\06f0815ee28e1df30d4e7b7301ba461a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\06f0815ee28e1df30d4e7b7301ba461a_JaffaCakes118.exe"
1⤵
PID:316
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 316 -s 628
  2⤵
  - Program crash
  PID:2316
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 316 -s 628
  2⤵
  - Program crash
  PID:1604

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 316 -ip 316
1⤵
PID:4832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 316 -ip 316
1⤵
PID:4016

memory/316-0-0x00000000026A0000-0x0000000002861000-memory.dmp

Filesize
1.8MB

Download
memory/316-1-0x0000000000401000-0x0000000000402000-memory.dmp

Filesize
4KB

Download
memory/316-2-0x0000000000400000-0x000000000077A000-memory.dmp

Filesize
3.5MB

Download
memory/316-3-0x0000000000400000-0x000000000077A000-memory.dmp

Filesize
3.5MB

Download
memory/316-5-0x00000000026A0000-0x0000000002861000-memory.dmp

Filesize
1.8MB

Download