Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
11-07-2024 09:35
Static task
static1
Behavioral task
behavioral1
Sample
3896858b1863281410edb6c0f9a853a1_JaffaCakes118.exe
Resource
win7-20240708-en
windows7-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
3896858b1863281410edb6c0f9a853a1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
3896858b1863281410edb6c0f9a853a1_JaffaCakes118.exe
-
Size
364KB
-
MD5
3896858b1863281410edb6c0f9a853a1
-
SHA1
cfa451bc441fd648da21d3c4483e05983013e24e
-
SHA256
d0034e007be4e84999566a52934d064fa9896650529e01c55e63080b64e30eb7
-
SHA512
6649e9e4468a08f4f8d73bc4caf6560622933ba1a8b560ca0bed78293bcf395919115038496cb7beb1639b87d4f679da7472c62940e4c351e73b2b5c065def4e
-
SSDEEP
6144:bbCdh2yzFFgIX0zE9NKFEWNFfK4CS0NwI32+fFBFFrkiHw:bmdAWgIXxcXNkjN3Zf1Frjw
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 916 3980 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\3896858b1863281410edb6c0f9a853a1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3896858b1863281410edb6c0f9a853a1_JaffaCakes118.exe"1⤵PID:3980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3980 -s 4762⤵
- Program crash
PID:916
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3980 -ip 39801⤵PID:3392