Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240704-en - resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system - submitted
13/07/2024, 01:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118.exe
Resource
win7-20240708-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118.exe
Resource
win10v2004-20240704-en
2 signatures
150 seconds
General
- Target 3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118.exe
- Size 680KB
- Sample240713-b8jr2ssgla
- SHA256 39dcb0bfe7b0976c8fde15932b6a35ecbaea875f33ef57d1b6872874607ac374
- MD5 3fb7fddcec6db1dc36c2320fbe2f3c53
- SHA1 87f343d25e941c236a683a74a5754f8bf40ce750
- SHA512 1f5b79d225e7894fdc72f49136d2662d8a030ad75f27a355e6021f136061dfc768f2d13403a96845e2fd2eab22490b9de8f6dbc76933c0eec86557e3ac99a135
- SSDEEP 12288:jClephVMo7IYJAB++2RrxRAjbeNC2v+clES+vYOqH:uOhKpYyB/MrxRAZMES+b+
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 928 1976 WerFault.exe 82 - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1976 3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1976 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1976 -s 5002⤵
- Program crash
PID:928
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1976 -ip 19761⤵PID:2676