523de11422e9cbf19fddc5a66f8427c2bfa900a72e7abee99512a71f512e3517

Analysis

max time kernel
93s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
04/07/2024, 22:48

Target

26840f094d20967847fd5ffc8e89250e_JaffaCakes118.exe
Size

304KB
MD5

26840f094d20967847fd5ffc8e89250e
SHA1

2db081d7e6a7f5e20f8fdfd96e9017dd14e547c2
SHA256

523de11422e9cbf19fddc5a66f8427c2bfa900a72e7abee99512a71f512e3517
SHA512

a4af1a614349c194ca203366f9f99df62413275082355b562e8860af37a6d0f774d31ec1e7de188981fb60fa59773fb4610fd8312b73d2890edf08b78ee0e3f9
SSDEEP

6144:Bzk6frBNCLdheIpAtX3r34KwUQ63owH1VMn3Nh2:F7BNCLdheIpAJ3T4KB3owHXMn3Nh

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
756	3972	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3972	26840f094d20967847fd5ffc8e89250e_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\26840f094d20967847fd5ffc8e89250e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\26840f094d20967847fd5ffc8e89250e_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3972
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3972 -s 464
  2⤵
  - Program crash
  PID:756

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3972 -ip 3972
1⤵
PID:4356