5a4c837ca73cf7dd7d9116fffaa632ab9f8e6f0e0d6419787c728f7c9ef1625b

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2024, 00:14

Target

4764d2c9b663b534da23b77224252de8_JaffaCakes118.exe
Size

556KB
MD5

4764d2c9b663b534da23b77224252de8
SHA1

fb60b6495c3da07fba6c692e3951f0f22569ad0b
SHA256

5a4c837ca73cf7dd7d9116fffaa632ab9f8e6f0e0d6419787c728f7c9ef1625b
SHA512

9924774b8a6b49091acae0196004b34629fc6eb2580013bf7c2ea60a45150f1728e32f64f442929bf0dd2f2a9c63cbfb42a6aff090335d475199f4355297a61f
SSDEEP

12288:Y7Lo8Rs90X41cnOOWB2KpyYK4BVqZDx2mpmHPW9GROsI8w:Y7L1yMgcnOds44Fp2PWUDI8

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2280	2512	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2512	4764d2c9b663b534da23b77224252de8_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\4764d2c9b663b534da23b77224252de8_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4764d2c9b663b534da23b77224252de8_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2512
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2512 -s 480
  2⤵
  - Program crash
  PID:2280

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2512 -ip 2512
1⤵
PID:4092