Analysis
-
max time kernel
93s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
06/07/2024, 22:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
297d31a506ef80901075f1f851e9f601_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
297d31a506ef80901075f1f851e9f601_JaffaCakes118.exe
Resource
win10v2004-20240704-en
1 signatures
150 seconds
General
-
Target
297d31a506ef80901075f1f851e9f601_JaffaCakes118.exe
-
Size
44KB
-
MD5
297d31a506ef80901075f1f851e9f601
-
SHA1
f74f3c29d17d5b9c0d87ecab966c2fef24ed78df
-
SHA256
1492ff8cb39b1159d476beff6f072602b9473e171bf8cfc0f9e3d63dd7a6c471
-
SHA512
d9c152d99a76020aecb96357ab00a626a571883c4ec1aed47bb9d5e7ac9fbe53a67b9510dfd74a82f5eedd5a985b722e58d9c9bb7260e308d69adf8450b1e29c
-
SSDEEP
768:ZttVz1u52sTew0rtPKrK9cCyiaHtzWNc+hzV3xbwJOqlrLcqc6khOWxDyLa+X+f1:3TI52u05PKrtCJaHtKc+Z8kqlAgk0Wxv
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1336 4940 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\297d31a506ef80901075f1f851e9f601_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\297d31a506ef80901075f1f851e9f601_JaffaCakes118.exe"1⤵PID:4940
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4940 -s 4722⤵
- Program crash
PID:1336
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4940 -ip 49401⤵PID:2988