c2a7529594c8683532001274cff34b0c32b29561c8894500cd435df089fe2056

Analysis

max time kernel
93s
max time network
99s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
11-07-2024 18:20

Target

3a3f2620202c2afb7b7cc958875d6847_JaffaCakes118.exe
Size

29KB
MD5

3a3f2620202c2afb7b7cc958875d6847
SHA1

200160b26d84eb23efc9ba775879696ce404aa7e
SHA256

c2a7529594c8683532001274cff34b0c32b29561c8894500cd435df089fe2056
SHA512

11e479176554598bdb929e5a2ace797879a93b7747a2779d8c11b86b9ccf26a36e43346cf7c618c04ce19592b5df28bce0d09f31a9c57804827b8b798bb09247
SSDEEP

768:QSn9xLuTOobSVDQl8s65OGQMhys5o5eq2V44n/k:Qy9UTOsSVElE5O1MhD5zq2v8

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3280	4364	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4364	3a3f2620202c2afb7b7cc958875d6847_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\3a3f2620202c2afb7b7cc958875d6847_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3a3f2620202c2afb7b7cc958875d6847_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4364
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4364 -s 436
  2⤵
  - Program crash
  PID:3280

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4364 -ip 4364
1⤵
PID:4772