Analysis
-
max time kernel
125s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
24-06-2024 20:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0a95aaceef31c9e5e6c4e893000f6165_JaffaCakes118.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a95aaceef31c9e5e6c4e893000f6165_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0a95aaceef31c9e5e6c4e893000f6165_JaffaCakes118.exe
-
Size
3.8MB
-
MD5
0a95aaceef31c9e5e6c4e893000f6165
-
SHA1
0c9eba509ad9de21ee899cfd5d4e87aa14fb350e
-
SHA256
5a66391bd6e0e4ab3bf69ebb05c68d3f01f9d5d82e9a134a53d104e07aa1831d
-
SHA512
affeaca2656c6050fa66d140a54646672fcb14f1a74aea234f5d622a078d59cb8b418a19d763e5a153a0d7b7a870384b916b8fbbb8a809904ab4f35d790f4ef0
-
SSDEEP
98304:quG42RnADYYdbcloAqgUlVYGuoT9STED6I8sDxHYDWfS:quLQADYw+ErfHuoTITEDZ5xHNS
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3972 3148 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a95aaceef31c9e5e6c4e893000f6165_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0a95aaceef31c9e5e6c4e893000f6165_JaffaCakes118.exe"1⤵PID:3148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3148 -s 4602⤵
- Program crash
PID:3972
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3148 -ip 31481⤵PID:3688
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4340,i,17096020621006928097,15544233752327415349,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:81⤵PID:3752