Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
13-07-2024 03:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe
-
Size
39KB
-
MD5
3ffde5b15ec2856b7bc899b30ec7ebc3
-
SHA1
dfb5ffe976786245504bee236c599dc0aee09f0c
-
SHA256
d7ebdb56215b9722105d341b90112410ca26d87085f00c97e51c423c445eeb71
-
SHA512
33911fb1c6877b1283716b58efad0e24a472493375bb08a44c9192b605859b141ba20a5feb75b54dbd0f49b57515184105df7776183db139499b8440546b58eb
-
SSDEEP
768:pAh0wGCfXJ8EyYIb0CvcchZqTEz2n27YT8t/:qvVBVhRCvmYzmDT8t/
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 68 3152 WerFault.exe 82 3500 3152 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3ffde5b15ec2856b7bc899b30ec7ebc3_JaffaCakes118.exe"1⤵PID:3152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3152 -s 2202⤵
- Program crash
PID:68
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3152 -s 2242⤵
- Program crash
PID:3500
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3152 -ip 31521⤵PID:4408
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3152 -ip 31521⤵PID:1896