Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
10/04/2024, 08:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eaa1305069b1f327504cc12c5e231feb_JaffaCakes118.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
eaa1305069b1f327504cc12c5e231feb_JaffaCakes118.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
eaa1305069b1f327504cc12c5e231feb_JaffaCakes118.exe
-
Size
26KB
-
MD5
eaa1305069b1f327504cc12c5e231feb
-
SHA1
48de2402ff63a375c56b35f3aeab5761a6db9f0e
-
SHA256
e2b4afe2afd5cab7ddb6a0132c2863734eb0c5536bba58677f44c5df2a76e3f6
-
SHA512
e4e9db4822c91d55c39f97d929c0382af9e43996c5d2155110a802ca66932ed7af571765ec6c8b55c9cc681471a325c118d538763c2cd42b160666e1fbf18ba9
-
SSDEEP
384:fkY+JepPhdykaHvLuJ/rTkMYfK26Z6HIYY2eedyKK8TdJ53ZkiTY67d:tykaPLuJTAfKf8audyKK8pBNj
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1708 2936 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\eaa1305069b1f327504cc12c5e231feb_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eaa1305069b1f327504cc12c5e231feb_JaffaCakes118.exe"1⤵PID:2936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2936 -s 2762⤵
- Program crash
PID:1708
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2936 -ip 29361⤵PID:3952