Analysis
- max time kernel
143s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 13:54
Static task
static1
Behavioral task
behavioral1
Sample
a5e4078870361e0999e22d3b63fbeee1_JaffaCakes118.exe
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
a5e4078870361e0999e22d3b63fbeee1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
- Target a5e4078870361e0999e22d3b63fbeee1_JaffaCakes118.exe
- Size 802KB
- Sample240613-q73abs1gmd
- SHA256 20e57e4ce3efb0dd7c46dac4b54e19d3b4418eeef19886dc335f1fdf344d22bc
- MD5 a5e4078870361e0999e22d3b63fbeee1
- SHA1 7d49d8bf94cabce0a12e1477b1955d46cfabd7c5
- SHA512 82a0d083e99c293839d3dc2dfbbc543329699fae26917de24eb03cb5f72b56931b44610bc0ba23334b20f4eb07de925fb716363e810138f725b72321ed390d01
- SSDEEP 24576:hl1HyqDjLsAwtMsbIVTKLQ6cTAwK0cnApQ51e8NT2:hDHBzTwtPsYMt0f0jpQPK
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3404 4008 WerFault.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\a5e4078870361e0999e22d3b63fbeee1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a5e4078870361e0999e22d3b63fbeee1_JaffaCakes118.exe"1⤵PID:4008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4008 -s 4842⤵
- Program crash
PID:3404
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4008 -ip 40081⤵PID:852
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3668,i,1067197275908310731,12785105794523264014,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:81⤵PID:3272