4efd2b3fea428a83ad2e1425354466fae9605e18423ad6e043eeab72c0c903d1

Analysis

max time kernel
92s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
10-07-2024 16:19

Target

3579a3e62c272eb07a56b8dcb2c57839_JaffaCakes118.exe
Size

553KB
MD5

3579a3e62c272eb07a56b8dcb2c57839
SHA1

aee92de0a04073671690a459cb8a9de81df63d48
SHA256

4efd2b3fea428a83ad2e1425354466fae9605e18423ad6e043eeab72c0c903d1
SHA512

559b1ae8f8ce749b869dd40d52ba54afd43cd6fcefeef6fdd49d4f5a7e30561d8dd9005879a3aebdba039191aba885b3109625c3c7e144522673f36beee7f928
SSDEEP

12288:SyqiHEX5pAq5j6XqcxfLYh9ZBQ2bCGg7ByWs514+RfqfnKa:RH8pAq5Q7fLY/ZBQ2b278WIlpqPP

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1736-0-0x0000000000400000-0x00000000004DD000-memory.dmp	upx
behavioral2/memory/1736-1-0x0000000000400000-0x00000000004DD000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4428	1736	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\3579a3e62c272eb07a56b8dcb2c57839_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3579a3e62c272eb07a56b8dcb2c57839_JaffaCakes118.exe"
1⤵
PID:1736
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1736 -s 380
  2⤵
  - Program crash
  PID:4428

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1736 -ip 1736
1⤵
PID:1280

memory/1736-0-0x0000000000400000-0x00000000004DD000-memory.dmp

Filesize
884KB

Download
memory/1736-1-0x0000000000400000-0x00000000004DD000-memory.dmp

Filesize
884KB

Download