Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
16-06-2024 20:35
Behavioral task
behavioral1
Sample
b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe
-
Size
714KB
-
MD5
b514e1ca810c72dd3a2695b96bd3c3e7
-
SHA1
e012e47c03a382650bfe622ca3366f179850a50b
-
SHA256
10d5b87ca712f37ee567ec47cef40829994fc5fd9e928516679d2dfa43e5e781
-
SHA512
c7144da2dba8fe928b424137a5e7dd9309cb11c2aa2167f8b52befc673135b21fccdc098ef34154561ce2cad5aa18a292da78825c4beb6c75fd7c6e82ba82419
-
SSDEEP
1536:cccvVn+/ylGTu/F1A60QXL2bYC/DwWdMkVQq8Yuv0/kbqIzxd:S+KxY60QU/x+OQq8Yuv0/kOUz
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 780 3068 WerFault.exe 80 3600 3068 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe"1⤵PID:3068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3068 -s 2202⤵
- Program crash
PID:780
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3068 -s 2242⤵
- Program crash
PID:3600
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3068 -ip 30681⤵PID:3344
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3068 -ip 30681⤵PID:3476