e3597d8ff570d050f50b9342bbdbf39134536ae43b82b4c00e5746f12e85bb58

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
01-07-2024 11:39

Target

1b27cf1a9808b8433f58d7e786a1c3d5_JaffaCakes118.exe
Size

100KB
MD5

1b27cf1a9808b8433f58d7e786a1c3d5
SHA1

13b6e7b7948b5476ea370fb9784dd0c35fb542d3
SHA256

e3597d8ff570d050f50b9342bbdbf39134536ae43b82b4c00e5746f12e85bb58
SHA512

d3e17d5ebac6701cae9df5106500b2231a92720363922f77eb4eb7be36a7ba01cd086172f6b1ded8610747aa4a11570259c20773d9037ebd0c8a10b796af0a02
SSDEEP

1536:avKLvEvUnogD2fG6w7gOaAI9zDVc8fjzSAxNNQyyVq8I:8KTEM2fG3aAe5c8rOGNz

Score

7^/10

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

behavioral2/memory/4804-0-0x0000000000400000-0x0000000000428000-memory.dmp upx
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

932 4804 WerFault.exe 1b27cf1a9808b8433f58d7e786a1c3d5_JaffaCakes118.exe

resource	yara_rule
behavioral2/memory/4804-0-0x0000000000400000-0x0000000000428000-memory.dmp	upx

pid	pid_target	process	target process
932	4804	WerFault.exe	1b27cf1a9808b8433f58d7e786a1c3d5_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\1b27cf1a9808b8433f58d7e786a1c3d5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1b27cf1a9808b8433f58d7e786a1c3d5_JaffaCakes118.exe"
1⤵
PID:4804

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4804 -s 476
2⤵
- Program crash
PID:932

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4804 -ip 4804
1⤵
PID:2268

memory/4804-0-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download