a4cad2ac92b79ee5a3c0b19e182832b2a6e3fd2ea731e65571561b0b307768a1

Analysis

max time kernel
136s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19-07-2024 17:43

Target

5cfd1189122850cb2bed71c1873ab2c7_JaffaCakes118.exe
Size

2.0MB
MD5

5cfd1189122850cb2bed71c1873ab2c7
SHA1

bf2fb64eb314020f8606dc4d23f1f4f90d371156
SHA256

a4cad2ac92b79ee5a3c0b19e182832b2a6e3fd2ea731e65571561b0b307768a1
SHA512

edafc7e8102f5da43ab15d4830f9bc5cf26c81e132ea990c7c980142e7d35dba73659849bad0a02810e9b87325cff07df7f50aa98b493f7b368a225c00d36eeb
SSDEEP

49152:/1lGdozg6hcF5HPpMu3WM7EiiHv14w7XGQbWI28rH8jiFvdt:/1lYoUAcF5vpMPMYiiPGw7XG8WI28F

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3088	4376	WerFault.exe	83

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4376	5cfd1189122850cb2bed71c1873ab2c7_JaffaCakes118.exe
4376	5cfd1189122850cb2bed71c1873ab2c7_JaffaCakes118.exe
4376	5cfd1189122850cb2bed71c1873ab2c7_JaffaCakes118.exe
4376	5cfd1189122850cb2bed71c1873ab2c7_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4376	5cfd1189122850cb2bed71c1873ab2c7_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\5cfd1189122850cb2bed71c1873ab2c7_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\5cfd1189122850cb2bed71c1873ab2c7_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4376
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4376 -s 624
  2⤵
  - Program crash
  PID:3088

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4376 -ip 4376
1⤵
PID:428

memory/4376-0-0x0000000000400000-0x0000000000612000-memory.dmp

Filesize
2.1MB

Download
memory/4376-1-0x00000000005BD000-0x00000000005C4000-memory.dmp

Filesize
28KB

Download