01e1bf07b9773aa7ad67062c58dc00cdc7eaea5c1df243554c64625187950812

Analysis

max time kernel
153s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
24/06/2024, 17:53

Target

09f73e71f53d3c2ef1ec079563ae33b5_JaffaCakes118.exe
Size

119KB
MD5

09f73e71f53d3c2ef1ec079563ae33b5
SHA1

801a5c28384f73e38c8b1ce252b686504b28fd13
SHA256

01e1bf07b9773aa7ad67062c58dc00cdc7eaea5c1df243554c64625187950812
SHA512

9a47c211b7782c818711160b7c017462b24bf1d6d7c300f782bcdc2b3573044fbf17d00bf333d607db3ebf56e8f5fe1894c9c43b29362aaa26af879e1f56f7cd
SSDEEP

3072:55bG149sIAHK+IrH30ddJx2yQ5PnD0HL9rSR6wUVsp:fG149V/jEH2jh0rA1+

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5072	3696	WerFault.exe	89

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3696	09f73e71f53d3c2ef1ec079563ae33b5_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\09f73e71f53d3c2ef1ec079563ae33b5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\09f73e71f53d3c2ef1ec079563ae33b5_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3696
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3696 -s 420
  2⤵
  - Program crash
  PID:5072

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3696 -ip 3696
1⤵
PID:1140

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3736 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:8
1⤵
PID:2776