93304282ff6764b0f760c5143fe48fb806f2cd08bcce8c776ba93e5d4dae2125

Analysis

max time kernel
143s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12-07-2024 23:13

Target

3f40d7b9f0d00b68e0844ccf54e047ab_JaffaCakes118.exe
Size

20KB
MD5

3f40d7b9f0d00b68e0844ccf54e047ab
SHA1

74f22b6eb269f4c8e750980846cc8fb06c42a49c
SHA256

93304282ff6764b0f760c5143fe48fb806f2cd08bcce8c776ba93e5d4dae2125
SHA512

6d9be7db0dba615cb377d76b43108168652bc1928685e6efdca076ed3461f0d7d8eb28fda5c927f1f2d3b20aa8eb5c4393671312742b1bf338f982c62b03e5c8
SSDEEP

192:/Tmjp4yt/qDXZf9J37vcwgEfOhBpD94+nH33U0S:/TUpifPCD94+nRS

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4488	2368	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2368	3f40d7b9f0d00b68e0844ccf54e047ab_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\3f40d7b9f0d00b68e0844ccf54e047ab_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3f40d7b9f0d00b68e0844ccf54e047ab_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2368
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2368 -s 464
  2⤵
  - Program crash
  PID:4488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2368 -ip 2368
1⤵
PID:1096