Analysis
- max time kernel
93s - max time network
97s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 09:24
Static task
static1
Behavioral task
behavioral1
Sample
a4d64287bf487679a52e3c53df5f1800_JaffaCakes118.exe
Resource
win7-20240419-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
a4d64287bf487679a52e3c53df5f1800_JaffaCakes118.exe
Resource
win10v2004-20240611-en
1 signatures
150 seconds
General
- Target a4d64287bf487679a52e3c53df5f1800_JaffaCakes118.exe
- Size 2.0MB
- Sample240613-ldjtnssfpb
- SHA256 b7fd21328a790d54aac95fa080701b71da79df6a30b273b52ab35990841eccb7
- MD5 a4d64287bf487679a52e3c53df5f1800
- SHA1 0caea4ad5ea8f369e9d76b3ec1c5e53e2c243cae
- SHA512 a24036295ac8641ca48e7dfdfdcc37b4acf6ca4a5edde7493432ed14338bb8c5e4c2436ba2fd1a3b82ef06c8a2c5ef4a7813c8512a8bb3927f303fcab48bde28
- SSDEEP 49152:PnV+xmhHpjOKV0gWv7nl7fIXqkDSBMoRkalBaeRgGpf:PnmKHx8tv7nVMSB1RtlY0
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
pid pid_target Process procid_target 2336 1540 WerFault.exe 81 2548 1540 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\a4d64287bf487679a52e3c53df5f1800_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a4d64287bf487679a52e3c53df5f1800_JaffaCakes118.exe"1⤵PID:1540
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1540 -s 4522⤵
- Program crash
PID:2336
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1540 -s 4602⤵
- Program crash
PID:2548
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1540 -ip 15401⤵PID:1692
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 1540 -ip 15401⤵PID:884