c56f730341509671a15c0c265b87ce0e67308f06d87b7112235074c3d5b098cf

Analysis

max time kernel
148s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08/07/2024, 01:40

Target

2a8a55afa4cc07e03a92627f5eec74b3_JaffaCakes118.exe
Size

128KB
MD5

2a8a55afa4cc07e03a92627f5eec74b3
SHA1

d0d65a578de33996074e82ab0f2ce2f313d05201
SHA256

c56f730341509671a15c0c265b87ce0e67308f06d87b7112235074c3d5b098cf
SHA512

102d9178b3b26de04e2ec67b230cdddce0ad7089b1f43e81a4b3af2c2710a531d3add5ac8e60804b711df090c7fcb83ed4fdd771df79a83991092c786ce18aaa
SSDEEP

3072:7vVW+h4fwoNHuEF8rmC4rBmGjz42A4+ocfdD:7vlh4fwopKrmC4rI8ElvoclD

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1896-2-0x00000000005B0000-0x0000000000630000-memory.dmp	upx
behavioral2/memory/1896-4-0x00000000005B0000-0x0000000000630000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1192	1896	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2a8a55afa4cc07e03a92627f5eec74b3_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2a8a55afa4cc07e03a92627f5eec74b3_JaffaCakes118.exe"
1⤵
PID:1896
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1896 -s 312
  2⤵
  - Program crash
  PID:1192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1896 -ip 1896
1⤵
PID:3600

memory/1896-0-0x0000000000400000-0x0000000000457000-memory.dmp

Filesize
348KB

Download
memory/1896-2-0x00000000005B0000-0x0000000000630000-memory.dmp

Filesize
512KB

Download
memory/1896-3-0x0000000000400000-0x0000000000457000-memory.dmp

Filesize
348KB

Download
memory/1896-4-0x00000000005B0000-0x0000000000630000-memory.dmp

Filesize
512KB

Download