Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
20-06-2024 14:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
06df0980fff3b950dcf02359b7162ee5_JaffaCakes118.exe
Resource
win7-20240220-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
06df0980fff3b950dcf02359b7162ee5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
06df0980fff3b950dcf02359b7162ee5_JaffaCakes118.exe
-
Size
4.9MB
-
MD5
06df0980fff3b950dcf02359b7162ee5
-
SHA1
d2a9de6ae30f40243d941fe747da2f20790b6e62
-
SHA256
0590894e2ef5e46ca7044fec6df83d362021c7a0798aed4aa38baa6e2fe066ed
-
SHA512
46f815717388a4bd273dcae7df9577a37b8089b8bc2a17b087ea7418d24af2a07722072ffbe2374f6a0697780fddf9e5fb360302b1452143b87aba761681f4e8
-
SSDEEP
98304:3Mtb7/SrJkyTl9KMkEfj9gMWRW1xpF27ZOidJf9a52DLsz8RG3slJu+NEOt:QurJR9/JgtWjpF2VtdJ852BceTNvt
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 528 652 WerFault.exe 83 2112 652 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\06df0980fff3b950dcf02359b7162ee5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\06df0980fff3b950dcf02359b7162ee5_JaffaCakes118.exe"1⤵PID:652
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 652 -s 5802⤵
- Program crash
PID:528
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 652 -s 5802⤵
- Program crash
PID:2112
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 652 -ip 6521⤵PID:4628
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 652 -ip 6521⤵PID:3372