1483e00909e87d75d046034939e7ad4384698d163f225a7e5b81ef3e4961acf4

Analysis

max time kernel
143s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
27-06-2024 21:37

Target

179ef30294c2e80407b6a7875e169770_JaffaCakes118.exe
Size

7.7MB
MD5

179ef30294c2e80407b6a7875e169770
SHA1

9f299ff3f9c94018ee0b6794ab8c3874a28e8eed
SHA256

1483e00909e87d75d046034939e7ad4384698d163f225a7e5b81ef3e4961acf4
SHA512

3f826233c0911e1dd8fbddc936477403928dcb424ce3bd35d668937012bef69d92a230bbfd3a2f342acc08430310172692ce9a93521a9548df057007cc3a2946
SSDEEP

196608:Vncofrnwp4mcKILAA0BXWT7nqBxHLg68b7le9X5UWLbp4wdN:xccnwpNrw7nqBxHx2letbrj

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1108	4756	WerFault.exe	82

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4756	179ef30294c2e80407b6a7875e169770_JaffaCakes118.exe
4756	179ef30294c2e80407b6a7875e169770_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\179ef30294c2e80407b6a7875e169770_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\179ef30294c2e80407b6a7875e169770_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4756
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4756 -s 1520
  2⤵
  - Program crash
  PID:1108

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4756 -ip 4756
1⤵
PID:3344