4892d203ea5cf64230ae3598673e9d5210de0390eb0dce199ab060f3b0009275

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19/07/2024, 06:04

Target

5abe415785458a22d5bf80a9087f6dc4_JaffaCakes118.exe
Size

991KB
MD5

5abe415785458a22d5bf80a9087f6dc4
SHA1

fff52928dbcc002ae8df4c5bd9f46231e62e55d2
SHA256

4892d203ea5cf64230ae3598673e9d5210de0390eb0dce199ab060f3b0009275
SHA512

a925c734ffdf81c21063afe94970c63561e881045dcf9cf3828910e891244d4a2aa0be7210b00cd6092781314d554f3fe057434460c8ad0cb3ac86bb113c7f91
SSDEEP

12288:cNdbozXjhMTbsHycars/59S9nSQxVB16ZqrtxmSaTZRSHsDrB4f62KgZUV7KnUYB:0oDjhtBGBD1Brt4nDVSX8KUC+Y59

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3168	6140	WerFault.exe	86
2120	6140	WerFault.exe	86

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	5abe415785458a22d5bf80a9087f6dc4_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\	5abe415785458a22d5bf80a9087f6dc4_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile"	5abe415785458a22d5bf80a9087f6dc4_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\5abe415785458a22d5bf80a9087f6dc4_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\5abe415785458a22d5bf80a9087f6dc4_JaffaCakes118.exe"
1⤵
- Modifies registry class
PID:6140
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 6140 -s 632
  2⤵
  - Program crash
  PID:3168
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 6140 -s 612
  2⤵
  - Program crash
  PID:2120

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 6140 -ip 6140
1⤵
PID:4900

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 6140 -ip 6140
1⤵
PID:1932

memory/6140-0-0x0000000000400000-0x00000000005E8000-memory.dmp

Filesize
1.9MB

Download
memory/6140-2-0x0000000000400000-0x00000000005E8000-memory.dmp

Filesize
1.9MB

Download
memory/6140-1-0x00000000005CC000-0x00000000005CD000-memory.dmp

Filesize
4KB

Download
memory/6140-3-0x0000000000400000-0x00000000005E8000-memory.dmp

Filesize
1.9MB

Download
memory/6140-4-0x0000000000400000-0x00000000005E8000-memory.dmp

Filesize
1.9MB

Download
memory/6140-5-0x0000000000400000-0x00000000005E8000-memory.dmp

Filesize
1.9MB

Download
memory/6140-6-0x0000000000400000-0x00000000005E8000-memory.dmp

Filesize
1.9MB

Download
memory/6140-7-0x0000000000400000-0x00000000005E8000-memory.dmp

Filesize
1.9MB

Download
memory/6140-8-0x0000000000400000-0x00000000005E8000-memory.dmp

Filesize
1.9MB

Download
memory/6140-10-0x00000000005CC000-0x00000000005CD000-memory.dmp

Filesize
4KB

Download