Analysis
-
max time kernel
95s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
10-07-2024 21:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3667fed9430ea1d0dd54df549e695727_JaffaCakes118.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3667fed9430ea1d0dd54df549e695727_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
3667fed9430ea1d0dd54df549e695727_JaffaCakes118.exe
-
Size
32KB
-
MD5
3667fed9430ea1d0dd54df549e695727
-
SHA1
3f71fe9837361afa6e94adc0a2934d0465eccfe5
-
SHA256
90c2b66a7c6237a384964806cf6943d97ba4558a0bf489b80f14b1f248ce63f3
-
SHA512
a9fd8ef0a1370e42b68903e282e47ed3a686f440648fb5944e369ed497d3d658100d8180dd2c377946109195eaa3c404f1f3d59ff89e368f81bf758fe03f58ab
-
SSDEEP
192:7pjgKPgsQJhFB3u3tVrHPyp2uu45x7mATwnVpqkC+j6fnj4:7ovmPnATKAT4pqktWnj4
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
Processes:
WerFault.exeWerFault.exepid pid_target process target process 4444 3244 WerFault.exe 3667fed9430ea1d0dd54df549e695727_JaffaCakes118.exe 2952 3244 WerFault.exe 3667fed9430ea1d0dd54df549e695727_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3667fed9430ea1d0dd54df549e695727_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3667fed9430ea1d0dd54df549e695727_JaffaCakes118.exe"1⤵PID:3244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3244 -s 2522⤵
- Program crash
PID:4444 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3244 -s 3042⤵
- Program crash
PID:2952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 3244 -ip 32441⤵PID:1980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 3244 -ip 32441⤵PID:4584