b19f6479cd08886946e3e33ee0e11f20e5efc6ce8a0273161ae819b04e979712

Analysis

max time kernel
96s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08/07/2024, 04:32

Target
2afd5eb174e59d4625640fe9cf334a01_JaffaCakes118.exe
Size 113KB
Sample240708-e6am5svcjc
SHA256 b19f6479cd08886946e3e33ee0e11f20e5efc6ce8a0273161ae819b04e979712
MD5 2afd5eb174e59d4625640fe9cf334a01
SHA1 4779efac73052e197922604a170fcc6889d38f77
SHA512 aff0dfeb1745630661cfce367963bf5a20653e1e1dac3084c0b633d8b8284e46677fa76359af0d13714c06bcaff3339bbbd65a9592b6c20ce5335089578ea41e
SSDEEP 3072:O8Zc0hTH53F/y0nzTd6UjIWVvn+ovkizy/XI:+0XXzxHhvuizy/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
844	3188	WerFault.exe	82
2776	3188	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\2afd5eb174e59d4625640fe9cf334a01_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2afd5eb174e59d4625640fe9cf334a01_JaffaCakes118.exe"
1⤵
PID:3188
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3188 -s 504
  2⤵
  - Program crash
  PID:844
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3188 -s 508
  2⤵
  - Program crash
  PID:2776

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3188 -ip 3188
1⤵
PID:4500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 3188 -ip 3188
1⤵
PID:3588

memory/3188-0-0x0000000000400000-0x0000000000435000-memory.dmp

Download

memory/3188-1-0x0000000000400000-0x0000000000435000-memory.dmp

Download