Analysis
-
max time kernel
91s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
13/07/2024, 02:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3fea05a653430d3679de89672496fbd3_JaffaCakes118.exe
Resource
win7-20240708-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3fea05a653430d3679de89672496fbd3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
-
Target
3fea05a653430d3679de89672496fbd3_JaffaCakes118.exe
-
Size
41KB
-
MD5
3fea05a653430d3679de89672496fbd3
-
SHA1
38638d8f2ab1a81b15bd2d0c66221bbc52d08ce7
-
SHA256
fb01f4ef090c7e7b0b74f66434ddba4008501b5920ad810d6334457cf06b44f2
-
SHA512
f2986fad39bd87ad0fc319ae7dcce3bb0f77e67b13eacabed50e669cecd1d822298117f97da928789884a991283900396f1958745bed5cd27fb412ab21703280
-
SSDEEP
768:YuY/s49uY/s4FRXwue8uOnd3zs/fpUgcYl7CI37ASA6I6R0L7av:KsUswRXwue8uAdDmpUrYbRx07
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4576 4376 WerFault.exe 82 1068 4376 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\3fea05a653430d3679de89672496fbd3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3fea05a653430d3679de89672496fbd3_JaffaCakes118.exe"1⤵PID:4376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4376 -s 2202⤵
- Program crash
PID:4576
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4376 -s 2242⤵
- Program crash
PID:1068
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4376 -ip 43761⤵PID:916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4376 -ip 43761⤵PID:1504