2977de23bc7af5bf8d19fa6438b9fdd91bcd1cc195b491edf557db9458a81172

Analysis

max time kernel
92s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
04-07-2024 21:20

Target

2640799eeb9463193646e77714b48ac6_JaffaCakes118.exe
Size

225KB
MD5

2640799eeb9463193646e77714b48ac6
SHA1

1fad6a8fc3b679a7bc67dcabe5e0d1a3ce7c09f1
SHA256

2977de23bc7af5bf8d19fa6438b9fdd91bcd1cc195b491edf557db9458a81172
SHA512

8562cd66bed5c3301327e6795a796746f281b4d2a241b1ba1f01aeb7dfa5b9cd514880dc18a8264e42273eb942ebad52a80380cb38a8b3c225234289fed72fa8
SSDEEP

3072:ll+hO9MTr8yWk1KZGZhwkH9V9H5p2nBHW5tmqupXuwglG++EtlHA46aTFlP0pbba:L+HoyWkRhw4VIpqup+w1+s4NKPhf7

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2156-0-0x0000000000400000-0x0000000000459000-memory.dmp	upx
behavioral2/memory/2156-2-0x0000000000400000-0x0000000000459000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1784	2156	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2640799eeb9463193646e77714b48ac6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2640799eeb9463193646e77714b48ac6_JaffaCakes118.exe"
1⤵
PID:2156
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2156 -s 264
  2⤵
  - Program crash
  PID:1784

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2156 -ip 2156
1⤵
PID:2540

memory/2156-0-0x0000000000400000-0x0000000000459000-memory.dmp

Filesize
356KB

Download
memory/2156-1-0x00000000001C0000-0x00000000001D5000-memory.dmp

Filesize
84KB

Download
memory/2156-2-0x0000000000400000-0x0000000000459000-memory.dmp

Filesize
356KB

Download