bb4ff2c8bf57b30ddb78cd26140973db134cbacaaa3760c28e9734bac1ee5d53

Analysis

max time kernel
94s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
27/09/2024, 10:29

Target

fa3c9f1c73f162d8b61f149cd4c65905_JaffaCakes118.exe
Size

104KB
MD5

fa3c9f1c73f162d8b61f149cd4c65905
SHA1

e12b0179823a1cd69fc456091fbdb1e38c6dd1dd
SHA256

bb4ff2c8bf57b30ddb78cd26140973db134cbacaaa3760c28e9734bac1ee5d53
SHA512

81453b7680c28be415b6912924104388e0e72314ca03f6473b9e86c369ebc428f37b73f04dc3b213f6297a0ec3f2ebc69b23d4c8ff39ab5a236fef484649411f
SSDEEP

1536:taMmKEB9SeVOkNV9qpAUY539HpWwmgNkww5lx5CvLvEWgDAgvWSr:v29xzP53PWwnzelxFA8r

Score

5^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/920-0-0x0000000000400000-0x0000000000464000-memory.dmp	upx
behavioral2/memory/920-2-0x0000000000400000-0x0000000000464000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2424	920	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\fa3c9f1c73f162d8b61f149cd4c65905_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fa3c9f1c73f162d8b61f149cd4c65905_JaffaCakes118.exe"
1⤵
PID:920
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 920 -s 220
  2⤵
  - Program crash
  PID:2424

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 920 -ip 920
1⤵
PID:3664

memory/920-0-0x0000000000400000-0x0000000000464000-memory.dmp

Filesize
400KB

Download
memory/920-2-0x0000000000400000-0x0000000000464000-memory.dmp

Filesize
400KB

Download