Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
13/07/2024, 19:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4315324d3099d1098e736d0f4fae63b3_JaffaCakes118.exe
Resource
win7-20240704-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
4315324d3099d1098e736d0f4fae63b3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
-
Target
4315324d3099d1098e736d0f4fae63b3_JaffaCakes118.exe
-
Size
729KB
-
MD5
4315324d3099d1098e736d0f4fae63b3
-
SHA1
fb3dab9fe31a2fe2b8ca360b3640ee697340f639
-
SHA256
f72037716ade62035704cf12e19697e9c22e5f73089b9e31428dff9066da51c5
-
SHA512
cdbef696d9cef76b1e52bdd91cdf54d2d14f10f35447c75027c3fd71106f29600110bf86dbb053fd575693256c905b22688b6876eb08945537ec539c67091a25
-
SSDEEP
12288:WyyMGMGm3PRfXWLcm/bbqd+FlbLdDJa4fdhO+bx6XJQNTd10TzDyErKAUxr:LN/Re4mjjBL3a8a+9/D1OprK1x
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3096 5080 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\4315324d3099d1098e736d0f4fae63b3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4315324d3099d1098e736d0f4fae63b3_JaffaCakes118.exe"1⤵PID:5080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5080 -s 2162⤵
- Program crash
PID:3096
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5080 -ip 50801⤵PID:3476