d5d4f79b65a54c23b6c4ad5f574388cdf1c3d2ad8f8f5616e030deb6f72a9f45

Analysis

max time kernel
131s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
28/06/2024, 08:10

Target

1966f6ecc83eb24f18ddb3179c4f6066_JaffaCakes118.exe
Size

53KB
MD5

1966f6ecc83eb24f18ddb3179c4f6066
SHA1

6e3c5edc5449c4be415bec58e7351f9b321caa6d
SHA256

d5d4f79b65a54c23b6c4ad5f574388cdf1c3d2ad8f8f5616e030deb6f72a9f45
SHA512

a5bb497a88c2593c4f063713b5490e2201d3dab3a69574b7ebe6159d6fd0e692a969571766315c0707e96626ea630a69344574bd957dcd34ff425a65876e0776
SSDEEP

1536:thEpAV+k1T2waTu7vkDZFH11V534Jy7L30GK:tsHk1Qu7v819Hw

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2052-0-0x0000000000400000-0x0000000000420000-memory.dmp	upx
behavioral1/memory/2052-2-0x0000000000400000-0x0000000000420000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4516	2052	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\1966f6ecc83eb24f18ddb3179c4f6066_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1966f6ecc83eb24f18ddb3179c4f6066_JaffaCakes118.exe"
1⤵
PID:2052
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2052 -s 340
  2⤵
  - Program crash
  PID:4516

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2052 -ip 2052
1⤵
PID:3420

memory/2052-0-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/2052-1-0x0000000000570000-0x0000000000572000-memory.dmp

Filesize
8KB

Download
memory/2052-2-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download