Analysis
- max time kernel
92s - max time network
96s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
12/06/2024, 15:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a11d27945f113e4837c14b1be864a549_JaffaCakes118.exe
Resource
win7-20240611-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a11d27945f113e4837c14b1be864a549_JaffaCakes118.exe
Resource
win10v2004-20240611-en
1 signatures
150 seconds
General
- Target a11d27945f113e4837c14b1be864a549_JaffaCakes118.exe
- Size 427KB
- Sample240612-slyfcstcnr
- SHA256 90c44c11b6f6ca1527830ad6985e442ea1f3020996624ff258f11f57a7abb98a
- MD5 a11d27945f113e4837c14b1be864a549
- SHA1 315cb6fdf11a9b1513220891ea97e37347a01e56
- SHA512 e912a0005fb3df34cadf6d6faa977bd5ba38a5913bea1afbe06d63d8f2fa13ca15f4226a81b8bf26f27264e10a085f1d7f4e4b1a9070aef3f5ac9b18bd6be67a
- SSDEEP 6144:aiFUvYoYDm5v8DJtBTd8dbVTh2adDWAzuroj3zjlYL1Q3R6:aigYLm5EDJtBJ8hrlurovhfR6
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2428 4900 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\a11d27945f113e4837c14b1be864a549_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a11d27945f113e4837c14b1be864a549_JaffaCakes118.exe"1⤵PID:4900
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4900 -s 3282⤵
- Program crash
PID:2428
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4900 -ip 49001⤵PID:64