Analysis
-
max time kernel
92s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
06/07/2024, 09:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
28006a2a36f97b98ded6c75e0f08db9a_JaffaCakes118.exe
Resource
win7-20240704-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
28006a2a36f97b98ded6c75e0f08db9a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
1 signatures
150 seconds
General
-
Target
28006a2a36f97b98ded6c75e0f08db9a_JaffaCakes118.exe
-
Size
825KB
-
MD5
28006a2a36f97b98ded6c75e0f08db9a
-
SHA1
a390c8723b866eb63120009653e463467db195ce
-
SHA256
1832e510005d5d18627ffbeb6897caa1a7455faa2d51d7955c8c57000bb9c72e
-
SHA512
87a026c3a70549809805bb27548a1a8e786cc341775c4c5db8dcd57a6b828ac12397425a2247d065bb115f8599d38c3e6dbe47f0d9b9d30e08c0701fbc5b4b04
-
SSDEEP
24576:HkP1AmIR7dgAnJeA4bSk01sINWxHaxiT5gTRSK1G9GB/:Hk9AmygYJeA4bhCW5Q5V
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4360 3772 WerFault.exe 80 2748 3772 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\28006a2a36f97b98ded6c75e0f08db9a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\28006a2a36f97b98ded6c75e0f08db9a_JaffaCakes118.exe"1⤵PID:3772
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3772 -s 5442⤵
- Program crash
PID:4360
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3772 -s 5522⤵
- Program crash
PID:2748
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3772 -ip 37721⤵PID:4276
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 196 -p 3772 -ip 37721⤵PID:4544