c6d80b5e7b468b931adfebf8c43243d49eb617f9ebc5f65d917b749da5cbf589

Analysis

max time kernel
149s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 01:37

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Size 76KB
Sample261014-b136qaey2n
SHA256 c6d80b5e7b468b931adfebf8c43243d49eb617f9ebc5f65d917b749da5cbf589
MD5 3a0531158091723c73904d059157c58b
SHA1 d73b5161918babd1caf539fe510ee6a65f8e547c
SHA512 882d69a7e6acd2fae300c085ba4640f2e014c17970a73b03bfc4515d7675b4693e6ff6b2e37ee59e17097c4613e217bfe42c8934e21cb4d7b03f13d5e639d5ac
SSDEEP 1536:4wOKeqtUAcuTCkjjbYNohtfXAMgOYrEP/3Y9ZOagjf5dm7W:2/KTfkqfvgOYejjBM7W
TLSH
T1817301FBBD61EA2DEC608A397A7F4AF15617FF00B2760902614F571D59502AC26FCB02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1388-0-0x0000000000400000-0x0000000000434000-memory.dmp	upx
behavioral1/memory/1388-2-0x0000000000400000-0x0000000000434000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2272	1388	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"
1⤵
PID:1388
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1388 -s 192
  2⤵
  - Program crash
  PID:2272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1388 -ip 1388
1⤵
PID:1080

memory/1388-0-0x0000000000400000-0x0000000000434000-memory.dmp

Download

memory/1388-2-0x0000000000400000-0x0000000000434000-memory.dmp

Download