71385fe9c0ea965ffc3b5c59d4a3b7cadb02dec6b6c6326a2da35ade66b24e21

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25-06-2024 20:14

Target

0f60cb77f0747196b91efddeb7f8acbc_JaffaCakes118.exe
Size

100KB
MD5

0f60cb77f0747196b91efddeb7f8acbc
SHA1

eef25ff3de8fdfaaef1ae144a91290ef448f0a72
SHA256

71385fe9c0ea965ffc3b5c59d4a3b7cadb02dec6b6c6326a2da35ade66b24e21
SHA512

66f6366b791562dcced92432e6eface21b7a89c388a5359ecf98b347a64c47f0068fa3aa1832f3bae4bdfe9cd9cfe2cb56eef1d96795c6337f16d72b937b15eb
SSDEEP

1536:c5Q8iAuismywskGLw0wF9MGM9K/oKtNgCMbA1bL3N+NM5UfaNIjnZpM:H7/KLOM5pCnrM

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1844	1484	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1484	0f60cb77f0747196b91efddeb7f8acbc_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0f60cb77f0747196b91efddeb7f8acbc_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0f60cb77f0747196b91efddeb7f8acbc_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1484
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1484 -s 464
  2⤵
  - Program crash
  PID:1844

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1484 -ip 1484
1⤵
PID:4880