a19129ffeaa4698f31e6a17ff94b4af85dd66bbba99b6a5ef174806812b6479d

Analysis

max time kernel
93s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09-10-2024 06:50

Target

2cbdbda225bfb04a43229ebf95680d8c_JaffaCakes118.exe
Size

132KB
MD5

2cbdbda225bfb04a43229ebf95680d8c
SHA1

400574862e36f74289727667c488f06f4fbee5d7
SHA256

a19129ffeaa4698f31e6a17ff94b4af85dd66bbba99b6a5ef174806812b6479d
SHA512

3feb6df1a834681c2875c355b4bdda529d781bde8cd9978f6fc32ce57c654bd7d62a810dbcfef97148dcfeb84ea3e466a4a9b658d4d913bf833369705d5f8c65
SSDEEP

3072:ax0UqCggJoQdbAZWaMVYx5trjqGSbZRiOH2nTSBMLZrEDZEEd:ax0UqCNT+ZWaMGxTrjLSbZRCmB6ZrYd

Score

5^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/3760-0-0x0000000000400000-0x0000000000467000-memory.dmp	upx
behavioral1/memory/3760-2-0x0000000000400000-0x0000000000467000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2824	3760	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\2cbdbda225bfb04a43229ebf95680d8c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2cbdbda225bfb04a43229ebf95680d8c_JaffaCakes118.exe"
1⤵
PID:3760
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3760 -s 464
  2⤵
  - Program crash
  PID:2824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3760 -ip 3760
1⤵
PID:2124

memory/3760-0-0x0000000000400000-0x0000000000467000-memory.dmp

Filesize
412KB

Download
memory/3760-1-0x0000000000A10000-0x0000000000A24000-memory.dmp

Filesize
80KB

Download
memory/3760-2-0x0000000000400000-0x0000000000467000-memory.dmp

Filesize
412KB

Download