6cb1c041e4f12770cee3d8de9f0d9a7fcf7df8aab5968fd8e0826779faa3412c

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 21:50

Target

437ab3a790384cd4f122ae9dcc0ed245_JaffaCakes118.exe
Size

88KB
MD5

437ab3a790384cd4f122ae9dcc0ed245
SHA1

3965f3311e56b97772e054bbe47b47dac293470a
SHA256

6cb1c041e4f12770cee3d8de9f0d9a7fcf7df8aab5968fd8e0826779faa3412c
SHA512

772dca903497b0c87e1654768f17574004707fe1ea573e1701247d527632e9ecf46588af52cb41aaedde0d05880cc0b10ea0df8cd5e0221b21093334cfd91b84
SSDEEP

1536:6klJht/fl7li+5Uwomo4nNBmRy3USEuDd/nW4SUIudg1cyoldwq3b7uVx:68JP/fmrwomVNoRjuDdnpSUfg1cyUl3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1116	2200	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\437ab3a790384cd4f122ae9dcc0ed245_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\437ab3a790384cd4f122ae9dcc0ed245_JaffaCakes118.exe"
1⤵
PID:2200
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 440
  2⤵
  - Program crash
  PID:1116

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2200 -ip 2200
1⤵
PID:4876

memory/2200-0-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2200-1-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2200-2-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2200-3-0x0000000000436000-0x000000000043E000-memory.dmp

Filesize
32KB

Download
memory/2200-4-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download