8d9761556286f5b5f573b1944d007a150a872422f0c03f2673f1ac873df4870b

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
01-07-2024 11:39

Target

1b27c9636d77b46e3818f2c6ca10f220_JaffaCakes118.exe
Size

21KB
MD5

1b27c9636d77b46e3818f2c6ca10f220
SHA1

eb2fc054e8d711b14c1287f1101e93a9dd290155
SHA256

8d9761556286f5b5f573b1944d007a150a872422f0c03f2673f1ac873df4870b
SHA512

360018671346a197c8169a3f71ea37b3675278a712c171c742f8bd182c4b6164ee2b89f54443ce280273cf42c949ac89f10209aeff2bcfb7bad92bbbdef67d9e
SSDEEP

384:j668Ox6jSBgUBRi++fx/BX6Wjzy/Yzka5l+5qng9sPr/MHVIRmr4nh/z07C:+O0jIBRp+ffX6/YnnpzrMH50Zz07C

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3080	968	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\1b27c9636d77b46e3818f2c6ca10f220_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1b27c9636d77b46e3818f2c6ca10f220_JaffaCakes118.exe"
1⤵
PID:968
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 968 -s 524
  2⤵
  - Program crash
  PID:3080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 968 -ip 968
1⤵
PID:3992

memory/968-0-0x00000000004E0000-0x00000000004FA000-memory.dmp

Filesize
104KB

Download
memory/968-1-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/968-3-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/968-4-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/968-5-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download