658832f9be01b503e674ca1c2dd8f0d116538485bdc77154512640755c930bcb

Analysis

max time kernel
147s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/06/2024, 01:05

Target

0bb06865433bde3b5ada56407dbd44df_JaffaCakes118.exe
Size

411KB
MD5

0bb06865433bde3b5ada56407dbd44df
SHA1

e7dbea467ec8f5e0cb5b255dc1d7fa24437b0a16
SHA256

658832f9be01b503e674ca1c2dd8f0d116538485bdc77154512640755c930bcb
SHA512

4d91cf59663332abcecd9121885d8dc3492c3e3cae79441ac880eb70f173765e70356c882aa0497f55f5122e7f907e4b95fd6f6a3a0bd8864f6e29cfceb9e459
SSDEEP

6144:HbwDt7B0BvqvWqG2P1vPSzrZGe3BmwxRBO3ocaTQsSvFCCLoQlvHoKekDRvRY/zh:H0DRB0hFf2JazbNvs2WCCdhlRCcRfY

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1192	4400	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\0bb06865433bde3b5ada56407dbd44df_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0bb06865433bde3b5ada56407dbd44df_JaffaCakes118.exe"
1⤵
PID:4400
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4400 -s 312
  2⤵
  - Program crash
  PID:1192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4400 -ip 4400
1⤵
PID:4000