Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240708-en -
resource tags
arch:x64arch:x86image:win10v2004-20240708-enlocale:en-usos:windows10-2004-x64system -
submitted
09/07/2024, 12:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
305cf7b3e8ac3aeb5a8a15efe025c39f_JaffaCakes118.exe
Resource
win7-20240704-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
305cf7b3e8ac3aeb5a8a15efe025c39f_JaffaCakes118.exe
Resource
win10v2004-20240708-en
1 signatures
150 seconds
General
-
Target
305cf7b3e8ac3aeb5a8a15efe025c39f_JaffaCakes118.exe
-
Size
26KB
-
MD5
305cf7b3e8ac3aeb5a8a15efe025c39f
-
SHA1
b6174ff4428273f3183ba21ef2dc0299f19b81b8
-
SHA256
0e7214584bdad9c536fe297b7d73d360ef3597859be19f12c73bc78a8b747685
-
SHA512
0cbb960ef216815a8ec1a43a11fbe5099de0bd9dbfede43e40beb2e9395e99f977d2a927c56cb56366ce7bd19eacf44e08e584b17fa45067e573d20113f5c08b
-
SSDEEP
768:iv18zJFLiTELx7WN5kgP4AO5ZBp4cNjs3hgi2uC/Y:qWTLoUxA5kgw994xxUY
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1556 1068 WerFault.exe 81 2348 1068 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\305cf7b3e8ac3aeb5a8a15efe025c39f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\305cf7b3e8ac3aeb5a8a15efe025c39f_JaffaCakes118.exe"1⤵PID:1068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1068 -s 2522⤵
- Program crash
PID:1556
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1068 -s 2682⤵
- Program crash
PID:2348
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1068 -ip 10681⤵PID:4012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 1068 -ip 10681⤵PID:3236