Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240704-en - resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system - submitted
06/07/2024, 18:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2942958c69cf2e8502f03a19d01fc778_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2942958c69cf2e8502f03a19d01fc778_JaffaCakes118.exe
Resource
win10v2004-20240704-en
1 signatures
150 seconds
General
- Target 2942958c69cf2e8502f03a19d01fc778_JaffaCakes118.exe
- Size 224KB
- Sample240706-xkzz1ssflc
- SHA256 9a55eb3dcebae3d4cc493e7052a63072ba6ad86691891bdf119eef2520dd6ede
- MD5 2942958c69cf2e8502f03a19d01fc778
- SHA1 97f4c581c210ed09d01a49a5f3001733827d73d3
- SHA512 198c22d097cb2ce60c60d899e29243618bf719f498fd0f1950d42df0613b695fd3e836d818cce12bc4afdc70e43a1155e30712baea1e190be3edfeb8bfca6372
- SSDEEP 6144:sXM39RyLLXxjMaLR0NoTJNHHkMJiH2IqV+:se9R4M4RRnkMJiWL+
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3412 4832 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2942958c69cf2e8502f03a19d01fc778_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2942958c69cf2e8502f03a19d01fc778_JaffaCakes118.exe"1⤵PID:4832
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4832 -s 3282⤵
- Program crash
PID:3412
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4832 -ip 48321⤵PID:2612