45ab1979854a77e9dd0aee9c1c70816b78d39c2bf08bcbcec00eece2648df531

Analysis

max time kernel
147s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
02-07-2024 21:21

Target

1d7c6be9fa4ae8b1fc38353f9128defb_JaffaCakes118.exe
Size

1.1MB
MD5

1d7c6be9fa4ae8b1fc38353f9128defb
SHA1

baa78b59546fe20690306b2b51d0a8706b819bb0
SHA256

45ab1979854a77e9dd0aee9c1c70816b78d39c2bf08bcbcec00eece2648df531
SHA512

fd50008d3a80dd12a72d93e8b26f2f65be1f98abce4302e9e18c7499b572047299defb1bb54ef756a8298b5c062276f6fbc5575952d0679e4a34abae350e8e29
SSDEEP

24576:fyBgFB2EoTKXtnOwd9LaJIBwhXEtiUwnBrh7512KZ1X:qBgRoTWnOwHzTwbV1f1X

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1416 440 WerFault.exe 1d7c6be9fa4ae8b1fc38353f9128defb_JaffaCakes118.exe

pid	pid_target	process	target process
1416	440	WerFault.exe	1d7c6be9fa4ae8b1fc38353f9128defb_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\1d7c6be9fa4ae8b1fc38353f9128defb_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1d7c6be9fa4ae8b1fc38353f9128defb_JaffaCakes118.exe"
1⤵
PID:440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 440 -s 584
2⤵
- Program crash
PID:1416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 440 -ip 440
1⤵
PID:2900

memory/440-1-0x0000000077EC2000-0x0000000077EC3000-memory.dmp

Filesize
4KB

Download
memory/440-0-0x0000000000AF0000-0x0000000000B62000-memory.dmp

Filesize
456KB

Download
memory/440-2-0x0000000000450000-0x0000000000451000-memory.dmp

Filesize
4KB

Download
memory/440-3-0x0000000000AF0000-0x0000000000B62000-memory.dmp

Filesize
456KB

Download