1c0a6f1c1deb44e6bd2a6de66a4b37c6f0f93ef82aa3daccdaf59e3274723cd0

Analysis

max time kernel
139s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
21-07-2024 23:33

Target

61e09d9fbfd7163180c4fa3e0c56c0bf_JaffaCakes118.exe
Size

357KB
MD5

61e09d9fbfd7163180c4fa3e0c56c0bf
SHA1

0721934c38f182658734d803fdac1dac8147cd2b
SHA256

1c0a6f1c1deb44e6bd2a6de66a4b37c6f0f93ef82aa3daccdaf59e3274723cd0
SHA512

702a91d624fccda9863177578ee290a4055eaccd4eb22b0f3b06410ec95494e8042d78889ddbb0f285aded6056eda84ba9b31d6566b2ba510a2307f2b0b6b667
SSDEEP

6144:zA4LlSKIL4pz+gWN0a0fFHkEAU7IM8V3OTjCgBOBaDsL:k8lSKILcz+gva0fFHkE77ITkbD

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
316	4952	WerFault.exe	83

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4952	61e09d9fbfd7163180c4fa3e0c56c0bf_JaffaCakes118.exe
4952	61e09d9fbfd7163180c4fa3e0c56c0bf_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\61e09d9fbfd7163180c4fa3e0c56c0bf_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\61e09d9fbfd7163180c4fa3e0c56c0bf_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4952
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4952 -s 652
  2⤵
  - Program crash
  PID:316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4952 -ip 4952
1⤵
PID:3740