d1e0907f0c41b6dee1554b8b2c4050d7124299e2c906b6e9954b833a6f62351d

Analysis

max time kernel
51s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
24/06/2024, 07:46

Target

07434cf02ab5ee6ca799b11ba81ba275_JaffaCakes118.exe
Size

81KB
MD5

07434cf02ab5ee6ca799b11ba81ba275
SHA1

6076ae8652dfcce872efc5c7d38e285abeb81a9b
SHA256

d1e0907f0c41b6dee1554b8b2c4050d7124299e2c906b6e9954b833a6f62351d
SHA512

bba1b64fb59db9d257ff9ea72721803e3b36521ca366345e0f07ab84baa2d4819f50c52fce7b6bb3e9a2d1c9dd443b77ed9f5f793304f1dd3683d2de3fab8ad7
SSDEEP

1536:k1A+tVxx8vGSxNvsiaBbB4uLyGU5mQjh9jT36Ln4WwP:U//xAUiaBl8rUQjLH36j4W4

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3924-0-0x0000000000400000-0x0000000000416000-memory.dmp	upx
behavioral2/memory/3924-1-0x0000000000400000-0x0000000000416000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5008	3924	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\07434cf02ab5ee6ca799b11ba81ba275_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\07434cf02ab5ee6ca799b11ba81ba275_JaffaCakes118.exe"
1⤵
PID:3924
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3924 -s 284
  2⤵
  - Program crash
  PID:5008

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3924 -ip 3924
1⤵
PID:1736

memory/3924-0-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/3924-1-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download