2371b9088d4eb3eb31fb055aef74f1a5a7dd632efb1ba5c36658d88ed3d8848c

Analysis

max time kernel
139s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
25-06-2024 13:03

Target

0e2cbc8b6f55b27d046af633a1a4d740_JaffaCakes118.exe
Size

262KB
MD5

0e2cbc8b6f55b27d046af633a1a4d740
SHA1

0ed4e5a69681800726b2443ca280fc8fbff26f91
SHA256

2371b9088d4eb3eb31fb055aef74f1a5a7dd632efb1ba5c36658d88ed3d8848c
SHA512

5319a412fde964a5f101602dfd1db02b72f6a418e279f864e2dd7590efb818102b26f5c5d6102be4d672d1b39d1d91c4500873a808d3fa4dde3f729912387bb9
SSDEEP

6144:turpcmTzm7CBK4+OTHJtLHsYAy11MqyUhVoItLNzGzrXyLX+I:turpcmTzm7CBK4+OzJtLrAZUhVoItKru

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1636-0-0x0000000000400000-0x0000000000443000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4348	1636	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\0e2cbc8b6f55b27d046af633a1a4d740_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0e2cbc8b6f55b27d046af633a1a4d740_JaffaCakes118.exe"
1⤵
PID:1636
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1636 -s 880
  2⤵
  - Program crash
  PID:4348

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 1636 -ip 1636
1⤵
PID:4432

memory/1636-0-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download
memory/1636-1-0x0000000000403000-0x0000000000404000-memory.dmp

Filesize
4KB

Download
memory/1636-2-0x0000000000530000-0x0000000000531000-memory.dmp

Filesize
4KB

Download
memory/1636-3-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download
memory/1636-5-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/1636-10-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download