Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
11/06/2024, 16:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9ec65ac18b9d61289c9e000f3b6659a1_JaffaCakes118.exe
Resource
win7-20240419-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
9ec65ac18b9d61289c9e000f3b6659a1_JaffaCakes118.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
- Target 9ec65ac18b9d61289c9e000f3b6659a1_JaffaCakes118.exe
- Size 554KB
- Sample240611-traf6atclk
- SHA256 1b0014df1108b0dbc283c17d5b8b8e1eedc3cf3802ce3b88fb0a7f39a6d10780
- MD5 9ec65ac18b9d61289c9e000f3b6659a1
- SHA1 78235092cfa9cc0d6bbf98dccbff9a3be6553387
- SHA512 60a1ea40b3659382dc23a31f853112a9687ec3d53b0241ddd0557e22ca7106684958180d5ac2f0fe6f29a51f34689dced399d0878f07326f54d18b3d9a329158
- SSDEEP 12288:YQjLuRE4xKR72qKoe/ZWsYUxUKQzZZQZsqtOq1:nLueaKR72qKoe/EhdKYav1
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3228 1532 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\9ec65ac18b9d61289c9e000f3b6659a1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\9ec65ac18b9d61289c9e000f3b6659a1_JaffaCakes118.exe"1⤵PID:1532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1532 -s 2842⤵
- Program crash
PID:3228
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1532 -ip 15321⤵PID:4804