Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
11/05/2024, 17:32
Static task
static1
Behavioral task
behavioral1
Sample
35beeb204ab0da457c0e99aed6f1dad5_JaffaCakes118.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
35beeb204ab0da457c0e99aed6f1dad5_JaffaCakes118.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
35beeb204ab0da457c0e99aed6f1dad5_JaffaCakes118.exe
-
Size
2.7MB
-
MD5
35beeb204ab0da457c0e99aed6f1dad5
-
SHA1
310a005de620caea7915a2df4a8397e75cd76e5a
-
SHA256
449e662c0c27b0e2838b0e4839589ba8bc1ae607c16bd6932ec5625871bcac00
-
SHA512
e46c97624be274c5a8fd1a087da06ed1ed40557badee1198a91403423d30b097472b4c66c9a5b07051eab049082f1d12e0b22df09913f1fb61dc2a85894a8a55
-
SSDEEP
49152:baL13s353Yr/2hATAJTW268TbizX2kjAx2Wap3A62wCoXwQ:WLGV8ueTAJTWsbiaqQ2WaKpoXz
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4572 3064 WerFault.exe 81 4484 3064 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\35beeb204ab0da457c0e99aed6f1dad5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\35beeb204ab0da457c0e99aed6f1dad5_JaffaCakes118.exe"1⤵PID:3064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3064 -s 3922⤵
- Program crash
PID:4572
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3064 -s 4002⤵
- Program crash
PID:4484
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3064 -ip 30641⤵PID:2320
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 3064 -ip 30641⤵PID:3932