Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
04-06-2024 02:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
935a05dce4292f91c043c664d8bb7dc0_JaffaCakes118.exe
Resource
win7-20240508-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
935a05dce4292f91c043c664d8bb7dc0_JaffaCakes118.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
935a05dce4292f91c043c664d8bb7dc0_JaffaCakes118.exe
-
Size
5.7MB
-
MD5
935a05dce4292f91c043c664d8bb7dc0
-
SHA1
f404f03b0799e02b10118607d6fc02f8b8a0827c
-
SHA256
c799a2f9f3d554cc01e9c12fed8aec397ecd663da49a8fa9fc5602ca89f7a3e3
-
SHA512
f3d68f3f4af70103bba3cc6de5f1f0021a2d4944451a4b8e60701a4b3182cbeeffa819cc943eeeedba5cffe13df0ab3fcc40517e43cd7d74026aa0f0f5bf80db
-
SSDEEP
98304:4BvbXfzWTApdgdhqazCdhFKPuZc2Jxa5n58nQM12nQIv1:cXIXqJhgPuZc2a5n50PMQ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 5356 4920 WerFault.exe 935a05dce4292f91c043c664d8bb7dc0_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\935a05dce4292f91c043c664d8bb7dc0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\935a05dce4292f91c043c664d8bb7dc0_JaffaCakes118.exe"1⤵PID:4920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4920 -s 6162⤵
- Program crash
PID:5356
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4920 -ip 49201⤵PID:2916