c9e38a45ca981500b9a37547cab650146217bea1b1b113ce275ad77c2319b899

Analysis

max time kernel
93s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13-07-2024 19:10

Target

42fa32f34ad7b315f7deb50452d22c7c_JaffaCakes118.exe
Size

124KB
MD5

42fa32f34ad7b315f7deb50452d22c7c
SHA1

b9fcd59d28928051aa4e8a41f8d31543d1bc376e
SHA256

c9e38a45ca981500b9a37547cab650146217bea1b1b113ce275ad77c2319b899
SHA512

0c920c32bd834a8230192f8ee666e4a0f6ed078983ab224f11eff82aa3d5ab87e3e3d56f7ab364529ddb977429aa9ba60d32404d29afb10837809161ae4e319c
SSDEEP

1536:wutkj/TQaU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VedNeG0h/l:dkjcaU0GgAT9lt

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4984	2852	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2852	42fa32f34ad7b315f7deb50452d22c7c_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\42fa32f34ad7b315f7deb50452d22c7c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\42fa32f34ad7b315f7deb50452d22c7c_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2852
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2852 -s 464
  2⤵
  - Program crash
  PID:4984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2852 -ip 2852
1⤵
PID:3788

memory/2852-0-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download
memory/2852-3-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download