20b27b9f43b3769d8deca96c46156e5614f1f46faf26522b649434beaebdd498

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
20/07/2024, 09:09

Target

5fde9eb75d03e199a1366471134474b6_JaffaCakes118.exe
Size

124KB
MD5

5fde9eb75d03e199a1366471134474b6
SHA1

4f834a068cc4326c40c5f675dd18904ec5cb3698
SHA256

20b27b9f43b3769d8deca96c46156e5614f1f46faf26522b649434beaebdd498
SHA512

e5cdf1f0e599ed25d4e30b41f4d3822ae94824ce54e57e5890039572be9a3445b7b4b9a98127cb41d371f50cba4090010e27a0d252f8d1ff23444f11705dec58
SSDEEP

1536:btJ9p7AyPb2U0GgAYu0P1kNmwldCMhdu8KWP/nTn8nBP9VewNeG0h/l:b9p8yPb2U0GgA898t

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4800	3372	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3372	5fde9eb75d03e199a1366471134474b6_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\5fde9eb75d03e199a1366471134474b6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\5fde9eb75d03e199a1366471134474b6_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3372
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3372 -s 464
  2⤵
  - Program crash
  PID:4800

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3372 -ip 3372
1⤵
PID:3276