6e484981b456d00eac2f86702eb632738b086d689040ea6b1f1dacf9c321fdab

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2024, 00:35

Target

4775c59cf2b8bc50c711a2d13a3d0dee_JaffaCakes118.exe
Size

58KB
MD5

4775c59cf2b8bc50c711a2d13a3d0dee
SHA1

a251e31c74161be66d11fe535151fe02f76cf2ce
SHA256

6e484981b456d00eac2f86702eb632738b086d689040ea6b1f1dacf9c321fdab
SHA512

f6963031db5cdacb5de11a5bcb0d39acbe5dd02cd9df8f55c0352e7acafaead59cd3d9c23b84cb4972d291f624addff1efa71b93c122f65904e1cdec35820e1f
SSDEEP

1536:n6E61syf8nM/sPIug8qKhYHBUiSXdzSEH+nmwm:nDisyfKus1wwX

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1320	2824	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2824	4775c59cf2b8bc50c711a2d13a3d0dee_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\4775c59cf2b8bc50c711a2d13a3d0dee_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4775c59cf2b8bc50c711a2d13a3d0dee_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2824
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2824 -s 432
  2⤵
  - Program crash
  PID:1320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2824 -ip 2824
1⤵
PID:3456