Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
02/06/2024, 12:35
Static task
static1
Behavioral task
behavioral1
Sample
8e17f2eae1da5385ce50ad181179cef8_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8e17f2eae1da5385ce50ad181179cef8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
befadegfdg_P.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
befadegfdg_P.exe
Resource
win10v2004-20240426-en
General
-
Target
befadegfdg_P.exe
-
Size
674KB
-
MD5
93c3c1d0d5299bb9cefe9e9181a17070
-
SHA1
77a89de10714fd3862276d65ca4cb440628d81a4
-
SHA256
fbe70131b58335fc221283fe76ee5ebeef38c677ab97a7a775ec1a8beb32aaa7
-
SHA512
9e2871266f95a6f96fd92db2f37141f4a39b095922e1a6f482a73fbaaeb653464f4ff0e445ef3aec95e9b1f2437245ff68fd7bc1c5e5341c572b24a1e4ab0ce3
-
SSDEEP
12288:vDwh0KCwShxJ6ziix/hapNUZaPTRrIKNkXKXZing0htMz:vrLIzbthapV7RrIi6KXZwJP4
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2936 4948 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\befadegfdg_P.exe"C:\Users\Admin\AppData\Local\Temp\befadegfdg_P.exe"1⤵PID:4948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 1922⤵
- Program crash
PID:2936
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4948 -ip 49481⤵PID:1112