Analysis
-
max time kernel
137s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
21-05-2024 14:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6392833e849fda191d223f36a34f056e_JaffaCakes118.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6392833e849fda191d223f36a34f056e_JaffaCakes118.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
6392833e849fda191d223f36a34f056e_JaffaCakes118.exe
-
Size
104KB
-
MD5
6392833e849fda191d223f36a34f056e
-
SHA1
5c4757525be08f7337768d38a3ba912782e4dcc1
-
SHA256
a9a300d057922c00679bb4e7ae95065578f4ad8c7bfe27794231004b7f36fe6e
-
SHA512
97d4be4ddf2101139fa3b3eb0ad46997afe88051f77b5c209d11bc23e9e963c0dc2483118bf89f068d3107179759d791e9fe3f2ee4b893dc783f3b24c2daf28b
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/o4sS4Izmd:nSHIG6mQwGmfOQd8YhY0/oJHUG
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3540 3828 WerFault.exe 6392833e849fda191d223f36a34f056e_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6392833e849fda191d223f36a34f056e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\6392833e849fda191d223f36a34f056e_JaffaCakes118.exe"1⤵PID:3828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3828 -s 3842⤵
- Program crash
PID:3540
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3828 -ip 38281⤵PID:4624