03e50913ea44a8df4922f120a68310b7f812350efe6b1440e631ffbf7a3bcbf3

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2024, 19:39

Target

4b1ca3ee4b4e7e855cb9849ac02e7898_JaffaCakes118.exe
Size

47KB
MD5

4b1ca3ee4b4e7e855cb9849ac02e7898
SHA1

5ab0476443aacecae5b6863a8e9df5237ed4de1b
SHA256

03e50913ea44a8df4922f120a68310b7f812350efe6b1440e631ffbf7a3bcbf3
SHA512

d8e1a19f1afe1103d582444f2fbfbec48b844d528d24b21216846dbcc505a3d90045dc14fb3803a1c46ae53d517a632016eb14842622938ade1422f711d0ccd6
SSDEEP

768:6GhkO9USNJw5Oy1Ukx0Aq9h+rcfeswjf3SFnNuXYLnW7N+o+zEui:6GrzwQyuk6X+rcfe9jLIo+Fz

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2468	348	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
348	4b1ca3ee4b4e7e855cb9849ac02e7898_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\4b1ca3ee4b4e7e855cb9849ac02e7898_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4b1ca3ee4b4e7e855cb9849ac02e7898_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:348
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 348 -s 428
  2⤵
  - Program crash
  PID:2468

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 348 -ip 348
1⤵
PID:4740