077f7175265d223bff1295f29839857ee33f5ca2664ceaa368187541b4896463

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27/06/2024, 12:04

Target

15ef7872637fff684f69c92fdfd9e7e9_JaffaCakes118.exe
Size

192KB
MD5

15ef7872637fff684f69c92fdfd9e7e9
SHA1

9e56eef9d22e01a5b8368894d0f096e1462f55ff
SHA256

077f7175265d223bff1295f29839857ee33f5ca2664ceaa368187541b4896463
SHA512

0ec0ffc0b7a93bac8b40da834695572731797daa1463dd98b2e1942d4d66bfa5d4a7f9e1cdbfb5272ad9d0ab9d486f9a4eb09b6f816752c3cce450c7fccd8024
SSDEEP

3072:R/wBJbXhh+RH5UL1iUG3KgKLKRKSdNIVqR5VxerayK/fObT/bGicFgvXb6jGJfXe:R/wBJlcRZSgKgKLKRKSdNIVqRTxEpK/N

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4884	892	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
892	15ef7872637fff684f69c92fdfd9e7e9_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\15ef7872637fff684f69c92fdfd9e7e9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\15ef7872637fff684f69c92fdfd9e7e9_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:892
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 892 -s 464
  2⤵
  - Program crash
  PID:4884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 892 -ip 892
1⤵
PID:984