7039a91bfd0d896d12e04101de01ea2a1394629f510947c87f786973f0159bf3

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
10-07-2024 11:04

Target

3474e161dbd84e15618fec1192f91b5b_JaffaCakes118.exe
Size

20KB
MD5

3474e161dbd84e15618fec1192f91b5b
SHA1

98f44f2fac9a17b9773ecfabf9ba676d0ddc4557
SHA256

7039a91bfd0d896d12e04101de01ea2a1394629f510947c87f786973f0159bf3
SHA512

b266c0566a875103ca20fbd5d86a19e423def52deabc10a384580b1c20e6470b6526b28c1ef3a1d10729c38d36b2c1cefddb83517ebe0ec43160632da9fe96a3
SSDEEP

192:PTWstfERSCIgwV6pRZyZj1l/Uy+nTdrD9hX/Cb8i:PTWofERS1vCCedrD9R6Qi

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4504	3948	WerFault.exe	81

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3948	3474e161dbd84e15618fec1192f91b5b_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\3474e161dbd84e15618fec1192f91b5b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3474e161dbd84e15618fec1192f91b5b_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3948
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3948 -s 496
  2⤵
  - Program crash
  PID:4504

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3948 -ip 3948
1⤵
PID:2908