0fe46948a64e7e9ecf9b0d054494d069a8aa7c6e03ec2cc7b0f96152f70ecb89

Analysis

max time kernel
94s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
10/07/2024, 08:18

Target

33f1e2652179abae75811b5013d486ea_JaffaCakes118.exe
Size

38KB
MD5

33f1e2652179abae75811b5013d486ea
SHA1

a70ad0bc11c314e148e1d1b34c6f36859c6aa9bb
SHA256

0fe46948a64e7e9ecf9b0d054494d069a8aa7c6e03ec2cc7b0f96152f70ecb89
SHA512

dc8b8f4ff869eeec61ddaa3c30bcbd3c399c1f4d3784271ede68c8f1700c98f837c65dd172ae0c6d19a93cc4e277e34cf079fa2ac61dea7f509d1a3e831c6d80
SSDEEP

768:dgjpoG1XgWE1skYlee0nW037uMyP1X0am8SU5PmS:dgCGPEsEZLm0amfUQS

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2056-0-0x0000000000400000-0x000000000041A000-memory.dmp	upx
behavioral2/memory/2056-2-0x0000000000400000-0x000000000041A000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2448	2056	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\33f1e2652179abae75811b5013d486ea_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\33f1e2652179abae75811b5013d486ea_JaffaCakes118.exe"
1⤵
PID:2056
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2056 -s 532
  2⤵
  - Program crash
  PID:2448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2056 -ip 2056
1⤵
PID:4884

memory/2056-0-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2056-1-0x0000000000480000-0x0000000000483000-memory.dmp

Filesize
12KB

Download
memory/2056-2-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download