Analysis
-
max time kernel
92s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
16-04-2024 16:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f3d63d6ca4e29fd8d18382d51d9df400_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
f3d63d6ca4e29fd8d18382d51d9df400_JaffaCakes118.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
f3d63d6ca4e29fd8d18382d51d9df400_JaffaCakes118.exe
-
Size
499KB
-
MD5
f3d63d6ca4e29fd8d18382d51d9df400
-
SHA1
bac1a6e61fbdb86204ebea1b6a1ddb500d2de0c0
-
SHA256
e72bc1baf00a1e109d03d9eaabddff11d50f65e1f06f1b4602769b0f3feb3579
-
SHA512
e2ff7255f9103c532735c03634567cc82259e98b1ea1cc93606a71193117df1b5995463d6957a54c2a0a170beaa2d270a44293e6a8bb65f6cb2e4f89ee8650d7
-
SSDEEP
12288:i6M9nk4yyH1vsq6inXnxNMCLRCpJSEVV3j/yq+jqGOfb4Nt:b4yyVfBqCYpxxj/ykGGU
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 556 3212 WerFault.exe 82 -
Modifies registry class 3 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.key f3d63d6ca4e29fd8d18382d51d9df400_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ f3d63d6ca4e29fd8d18382d51d9df400_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile" f3d63d6ca4e29fd8d18382d51d9df400_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3d63d6ca4e29fd8d18382d51d9df400_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f3d63d6ca4e29fd8d18382d51d9df400_JaffaCakes118.exe"1⤵
- Modifies registry class
PID:3212 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3212 -s 5442⤵
- Program crash
PID:556
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3212 -ip 32121⤵PID:2184