945c0a8225c8c54dff726651109eabfc18a9035412bd8c4ce672e2c5ea6c079b

Analysis

max time kernel
51s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
26/06/2024, 01:00

Target

102da5bb7186c87fe42ba6779fce6b6f_JaffaCakes118.exe
Size

248KB
MD5

102da5bb7186c87fe42ba6779fce6b6f
SHA1

304f7e0b0b69385a3281afc84e62811c23f6a2d9
SHA256

945c0a8225c8c54dff726651109eabfc18a9035412bd8c4ce672e2c5ea6c079b
SHA512

e70b4c6748ba9166f011c0a7e3a7775c1a2baf6cfdcc415bd2e0de225626335155a2ee8f9890a7cffd2223613262e020194229537c2aa6e5ca0f0054dd01bf55
SSDEEP

6144:TyyVQyAyyUf9dgAVRKlqBiErIsKnPmb7/jWal+FfAje+5/RxoOsutOSD/uP39RWU:TykyUf9DRKlqgErIsKnPmb7/jWa1e+5T

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3560	4700	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4700	102da5bb7186c87fe42ba6779fce6b6f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\102da5bb7186c87fe42ba6779fce6b6f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\102da5bb7186c87fe42ba6779fce6b6f_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4700
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4700 -s 500
  2⤵
  - Program crash
  PID:3560

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4700 -ip 4700
1⤵
PID:376