4a273995c9309a128517a330b406500672f8188533bb8e15c1c0d9a04aed5790

Analysis

max time kernel
141s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 09:50

Target

3ce3473a04d00fb73a8991baf271b93e_JaffaCakes118.exe
Size

211KB
MD5

3ce3473a04d00fb73a8991baf271b93e
SHA1

3978699c6d0b2de87dbe9928458f9a08c87856e4
SHA256

4a273995c9309a128517a330b406500672f8188533bb8e15c1c0d9a04aed5790
SHA512

318748a592c899933a8e0571dbd6861cbb32e1f77c5b6c0330ba29285aeedd9e42bf1f739ce4d7052fe0615ca19b8319ad69a4b0028ad1e1eeace6ca7388d4b8
SSDEEP

6144:H6OsXizaadws9ERUfTUZmrWyguqCfNaFtVuX6:HVsXizaaOs9xIZmrHFqC1aXEK

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/5076-0-0x0000000000400000-0x0000000002A19000-memory.dmp	upx
behavioral2/memory/5076-1-0x0000000000400000-0x0000000002A19000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1096	5076	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\3ce3473a04d00fb73a8991baf271b93e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3ce3473a04d00fb73a8991baf271b93e_JaffaCakes118.exe"
1⤵
PID:5076
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5076 -s 300
  2⤵
  - Program crash
  PID:1096

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 5076 -ip 5076
1⤵
PID:408

memory/5076-0-0x0000000000400000-0x0000000002A19000-memory.dmp

Filesize
38.1MB

Download
memory/5076-1-0x0000000000400000-0x0000000002A19000-memory.dmp

Filesize
38.1MB

Download