21e6eb656ae462596295a797c632dd93aa893db610e5a3f51f42ffb10b421dc4

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 13:11

Target

634d89b8900ed5cd01872a449e91d7bb_JaffaCakes118.exe
Size

82KB
MD5

634d89b8900ed5cd01872a449e91d7bb
SHA1

17608087ae88ed7188d1ec258f4128dd947b15a9
SHA256

21e6eb656ae462596295a797c632dd93aa893db610e5a3f51f42ffb10b421dc4
SHA512

d7ae534842948c491ce66c878ad19066a9b5c386161ade1f37de76120b1dae5b8b8bfbf13d1d71c6d90e93a5f43a51a21874251b151e037d7aa7f4e840b41d66
SSDEEP

1536:/p2VhPRfF9xfIG6gVkbUDnSHojV6SsNyPloxjcwLg/r5gWoBiJ:/p2VrFcenSHCV69yaxjcwL6T7J

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3684	5056	WerFault.exe	83
5028	5056	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\634d89b8900ed5cd01872a449e91d7bb_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\634d89b8900ed5cd01872a449e91d7bb_JaffaCakes118.exe"
1⤵
PID:5056
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 252
  2⤵
  - Program crash
  PID:3684
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 300
  2⤵
  - Program crash
  PID:5028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5056 -ip 5056
1⤵
PID:1432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 5056 -ip 5056
1⤵
PID:1624