Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28/06/2024, 09:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
199938ad03593cbb79f9df659252a676_JaffaCakes118.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
199938ad03593cbb79f9df659252a676_JaffaCakes118.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
199938ad03593cbb79f9df659252a676_JaffaCakes118.exe
-
Size
166KB
-
MD5
199938ad03593cbb79f9df659252a676
-
SHA1
0e363c88d173bc7c2f197358ec9af0d31381af8b
-
SHA256
c8bf7bb8d9a6210cf68eeaf3be338d62541349d023f12c04fc8410c837c5622c
-
SHA512
be2640e488757f428a94fdbeca0192c68e0205ca72dabcfbd9072497d7755d3b7dc0f6a8b0ba2e1cb622de8ab8db597c74bf160e308c3f89dbdf422f14360095
-
SSDEEP
3072:XBcQBpm448ygPCCTGS/ZJl+jbezJdJNRhvPc2F4N8:XBrBp34SPRt8bAJTFP5
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2976 5060 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\199938ad03593cbb79f9df659252a676_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\199938ad03593cbb79f9df659252a676_JaffaCakes118.exe"1⤵PID:5060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 3482⤵
- Program crash
PID:2976
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5060 -ip 50601⤵PID:2620