Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
07-04-2024 19:48
Static task
static1
Behavioral task
behavioral1
Sample
e5b890befeb77eae9ca8ef9fe01abed0_JaffaCakes118.exe
Resource
win7-20231129-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
e5b890befeb77eae9ca8ef9fe01abed0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
e5b890befeb77eae9ca8ef9fe01abed0_JaffaCakes118.exe
-
Size
172KB
-
MD5
e5b890befeb77eae9ca8ef9fe01abed0
-
SHA1
b88ef8ed996df38b72e5ed02572f4a20380ccd7e
-
SHA256
4d7b14fb8a73966555dc561a864a587ef50ff972d698bd27d704545018a92e4c
-
SHA512
d62e9229d8fa3372f3c1cd7597c8d8401f393cc8483fa24cabe571cc253cd399b5172c6589317a29c855a890f9b5dec9bd370ac3a67503d6d24e07f003b46939
-
SSDEEP
3072:RpXw02bG7/Tg2DmffDrbYHHf3xaW3ShYtNYK8eY:oVSTTLmfbHe/haMSNKe
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1284 2124 WerFault.exe e5b890befeb77eae9ca8ef9fe01abed0_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e5b890befeb77eae9ca8ef9fe01abed0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e5b890befeb77eae9ca8ef9fe01abed0_JaffaCakes118.exe"1⤵PID:2124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2124 -s 2842⤵
- Program crash
PID:1284
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2124 -ip 21241⤵PID:1404