Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
13/07/2024, 13:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
41c888bb280de209d5c736d784cba4af_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
41c888bb280de209d5c736d784cba4af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
-
Target
41c888bb280de209d5c736d784cba4af_JaffaCakes118.exe
-
Size
152KB
-
MD5
41c888bb280de209d5c736d784cba4af
-
SHA1
170e44157cf587183202924448562287f1e98028
-
SHA256
667e268e8f97eeda13349fc9238403fb4f38195f15dff6889783e4ab4ba03103
-
SHA512
238b60661cf8700657425d191c0263a28986a8d5489acc0a249cd87a8cc9603784d2f88552e5a862413a07fb8f3c88899392bf82e9ee30be7c3c27396a98c1bf
-
SSDEEP
768:eY3GDcYWHTcA2pm+PuMVV3Lb8XzZjXQV7V9dW7g38WxBSiXdKymgJoccY:eY2Q1z0pPuOVbwXGV9deg38KNXA2ocV
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1520 3756 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\41c888bb280de209d5c736d784cba4af_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\41c888bb280de209d5c736d784cba4af_JaffaCakes118.exe"1⤵PID:3756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3756 -s 3002⤵
- Program crash
PID:1520
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3756 -ip 37561⤵PID:4552