1ece84cb14e20365e00eb63171c1cf818ace2fb284808028f1ef4ad9566bab0e

Analysis

max time kernel
92s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
09-07-2024 17:09

Target

3140c3e6f257046c800ee4edeb4090cd_JaffaCakes118.exe
Size

916KB
MD5

3140c3e6f257046c800ee4edeb4090cd
SHA1

26441ca029d42d251840a962158cc81e2e721dfd
SHA256

1ece84cb14e20365e00eb63171c1cf818ace2fb284808028f1ef4ad9566bab0e
SHA512

8ad642e088d155b07b1fef76e0941c6e85dfd2f48b47188e21db3304b423640a70a9c96855d4acc91cc657d645340d434cd93ce4e4ae104f61886f99fed17a11
SSDEEP

12288:SlAvQ6sPfvCs4UiijDU6S9IgZAXanjS4gJCbvoqqRpz2vBr0VGVmDRvcK+:WYifqBU5ELuXaO4gczoqSzKCEoDR

Score

4^/10

Drops file in Program Files directory 3 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\GbPlugin\gbieh.dll	3140c3e6f257046c800ee4edeb4090cd_JaffaCakes118.exe
File created	C:\Program Files (x86)\GbPlugin\bb.gpc	3140c3e6f257046c800ee4edeb4090cd_JaffaCakes118.exe
File created	C:\Program Files (x86)\GbPlugin\gbpdist.dll	3140c3e6f257046c800ee4edeb4090cd_JaffaCakes118.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
540	4548	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\3140c3e6f257046c800ee4edeb4090cd_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3140c3e6f257046c800ee4edeb4090cd_JaffaCakes118.exe"
1⤵
- Drops file in Program Files directory
PID:4548
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4548 -s 388
  2⤵
  - Program crash
  PID:540

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4548 -ip 4548
1⤵
PID:4852

memory/4548-0-0x0000000000400000-0x000000000055C000-memory.dmp

Filesize
1.4MB

Download
memory/4548-1-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/4548-2-0x0000000000680000-0x00000000006C7000-memory.dmp

Filesize
284KB

Download
memory/4548-3-0x0000000000400000-0x000000000055C000-memory.dmp

Filesize
1.4MB

Download
memory/4548-5-0x00000000024B0000-0x0000000002519000-memory.dmp

Filesize
420KB

Download
memory/4548-6-0x0000000002580000-0x0000000002581000-memory.dmp

Filesize
4KB

Download
memory/4548-4-0x0000000000650000-0x000000000065B000-memory.dmp

Filesize
44KB

Download
memory/4548-10-0x0000000000400000-0x000000000055C000-memory.dmp

Filesize
1.4MB

Download
memory/4548-11-0x0000000000680000-0x00000000006C7000-memory.dmp

Filesize
284KB

Download