Analysis
-
max time kernel
140s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11/04/2024, 13:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ed91324f0907b0f4b545b7520ab8e469_JaffaCakes118.exe
Resource
win7-20240221-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
ed91324f0907b0f4b545b7520ab8e469_JaffaCakes118.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
ed91324f0907b0f4b545b7520ab8e469_JaffaCakes118.exe
-
Size
1012KB
-
MD5
ed91324f0907b0f4b545b7520ab8e469
-
SHA1
c473dfe2f0d04e65ef0a90c52b65d74a57991236
-
SHA256
79ff73ebfde3c274add059b985205481e2a77cf5f04163ca3a42682b52bc44df
-
SHA512
ba29fe6e5f12b5e084e6eb5cd715a8713ded394fd29641266124368ac7c782c376cf7c15ea46ef3453808fd792218981fdc7bc41af2e29bcc5c6f4cf5123d806
-
SSDEEP
24576:I3YWhPxKAxGuAHSM1C7jYf96EAHZKF4n7S2NTtBT/:21hHgukSxjsA5KFUttBT/
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-275798769-4264537674-1142822080-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ed91324f0907b0f4b545b7520ab8e469_JaffaCakes118 = "\"C:\\Users\\Admin\\AppData\\Local\\5117286216.exe\" 0 22 " ed91324f0907b0f4b545b7520ab8e469_JaffaCakes118.exe -
Program crash 1 IoCs
pid pid_target Process procid_target 1488 4088 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\ed91324f0907b0f4b545b7520ab8e469_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ed91324f0907b0f4b545b7520ab8e469_JaffaCakes118.exe"1⤵
- Adds Run key to start application
PID:4088 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4088 -s 6762⤵
- Program crash
PID:1488
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4088 -ip 40881⤵PID:1372