Analysis
-
max time kernel
41s -
max time network
49s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
03/07/2024, 09:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
21f08a858941108d79c9075038fb844b_JaffaCakes118.exe
Resource
win7-20240611-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
21f08a858941108d79c9075038fb844b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
21f08a858941108d79c9075038fb844b_JaffaCakes118.exe
-
Size
115KB
-
MD5
21f08a858941108d79c9075038fb844b
-
SHA1
4a6529280e0c888542c7accca91b61c74269b86d
-
SHA256
2ed946cbd306c99f0ccdc1991a20db3611c8ebde7de175d2a06120ed9c306ce1
-
SHA512
42bbd9005d923205c5bb5d125927f8fb1549cdb4e9d719cc86edc9af4848fd2bf35f8657d18eb1afc307278bd8c3615375b08c2deaa196e93c24b7aecf528349
-
SSDEEP
3072:x/ZxUisP/GfzyPCD2b3wY1lR2njmGyiq2H:BUl/GfeqD2b3wGRMfq
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4896 4376 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\21f08a858941108d79c9075038fb844b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\21f08a858941108d79c9075038fb844b_JaffaCakes118.exe"1⤵PID:4376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4376 -s 4042⤵
- Program crash
PID:4896
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4376 -ip 43761⤵PID:4308