16143615bf77d62aa91828b6fe2b4e8c100fff0a12b9710077b7b9fe39d7ca41

Analysis

max time kernel
94s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2024, 11:14

Target

498a00a26aa0347b628d2cfb4d0042f9_JaffaCakes118.exe
Size

142KB
MD5

498a00a26aa0347b628d2cfb4d0042f9
SHA1

f9917cac4f981a858da882b24bab4e5b520d0d0a
SHA256

16143615bf77d62aa91828b6fe2b4e8c100fff0a12b9710077b7b9fe39d7ca41
SHA512

e011b3e05c6895bd51fca217629ddc1f50a3f0c75de1fd9d7c109140384d6eeddd3e82206aad2444f735dd59f01acb5f48f0226fadbfd70c99432a07244ec43a
SSDEEP

3072:HPC+w9KM+lbMnqYgQnVu+VZkFC8f1ViHbfH7AXhZNm0h+Md1/lkzL+:64lbe5xkl1V88xnNkzL

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
912	2836	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2836	498a00a26aa0347b628d2cfb4d0042f9_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\498a00a26aa0347b628d2cfb4d0042f9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\498a00a26aa0347b628d2cfb4d0042f9_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2836
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2836 -s 424
  2⤵
  - Program crash
  PID:912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2836 -ip 2836
1⤵
PID:4984