Analysis
-
max time kernel
95s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
05-07-2024 16:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
270840e836204b40a73d02def6f4c56f_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
270840e836204b40a73d02def6f4c56f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
270840e836204b40a73d02def6f4c56f_JaffaCakes118.exe
-
Size
795KB
-
MD5
270840e836204b40a73d02def6f4c56f
-
SHA1
b700cf3d987dd8ef75013696dbd515638abc06e3
-
SHA256
5643e6693519b9e54451e446dd319c1f8a52e045c9a24eb7b901b894d2d5d6f8
-
SHA512
87a9c380f4746f02d1d36ae33ccce9fab0a03503cf259ca8557c8761bbbd163e4999486e9e4918468fe1ee7c1bbbafa3cf6346a10254be50d5ce5010abb89184
-
SSDEEP
24576:xRM7VN/c99hAzj60BFueyeNWNR3kl/B9ifL3Tj1W3H:xRM7VRc9DAzjJFubeNeRk/B9ifj1w
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2352 812 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\270840e836204b40a73d02def6f4c56f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\270840e836204b40a73d02def6f4c56f_JaffaCakes118.exe"1⤵PID:812
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 812 -s 3962⤵
- Program crash
PID:2352
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 812 -ip 8121⤵PID:3328