Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
09/07/2024, 11:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
302ece536e6cca371ed202c8c63f3545_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
302ece536e6cca371ed202c8c63f3545_JaffaCakes118.exe
Resource
win10v2004-20240704-en
1 signatures
150 seconds
General
-
Target
302ece536e6cca371ed202c8c63f3545_JaffaCakes118.exe
-
Size
629KB
-
MD5
302ece536e6cca371ed202c8c63f3545
-
SHA1
f19215507d3cfa8ec6c9cc60d037846438f03c7a
-
SHA256
30ad379f396f3228de4138bc907fc7bcafee21e4c38d62f84d3909b2fee0a3e0
-
SHA512
1154d5a084076340b8abdf88d6d4ebfc69af99437d268583ff842e697fb1b0f94cf820d19b0836124fdb94785c2e01fe461f71b5929c782e20883bc36f875222
-
SSDEEP
12288:dRnzcT7+pTsQ4FrSwhfMH485d+FaPFS9LX9IXLSSSTDfxmgORqNJBV1Ls2LMpB8a:P+7ETFWuyfMY85dA0FS9LabbSTvOMNJ4
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3948 1088 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\302ece536e6cca371ed202c8c63f3545_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\302ece536e6cca371ed202c8c63f3545_JaffaCakes118.exe"1⤵PID:1088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1088 -s 23402⤵
- Program crash
PID:3948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1088 -ip 10881⤵PID:3676