Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28-06-2024 01:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1847f2bbb5570f459654a5026717219c_JaffaCakes118.exe
Resource
win7-20240220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1847f2bbb5570f459654a5026717219c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
1847f2bbb5570f459654a5026717219c_JaffaCakes118.exe
-
Size
28KB
-
MD5
1847f2bbb5570f459654a5026717219c
-
SHA1
1d089381c3ba36a541846b25bbc43fe2689d2639
-
SHA256
bc1e8f5066d1adc3aa1404610c0d22352eaa9effa1dacf507d3f15354e0e859f
-
SHA512
0cc76f5b138296074c731a21e3bbfe08d0b0f7c78f3e07525fd6e456a7ca285f4abbfb2aff7d0cf77bfac8a21bf48de13891b74f0481b32e0dbce25d64e162e4
-
SSDEEP
384:yxjDS/7mDt2g1/LzI0CZUwAT2ma3Oz+MajOnySY+2dDHSMXp+InujC:6yatB/LMdncIOz9aSnypd+wplnw
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 5064 2776 WerFault.exe 79 3700 2776 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\1847f2bbb5570f459654a5026717219c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\1847f2bbb5570f459654a5026717219c_JaffaCakes118.exe"1⤵PID:2776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2776 -s 2562⤵
- Program crash
PID:5064
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2776 -s 2642⤵
- Program crash
PID:3700
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2776 -ip 27761⤵PID:876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 2776 -ip 27761⤵PID:4452