Analysis
- max time kernel
94s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
15/07/2024, 10:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
495da4d834e7fd8309af6993e437ab0d_JaffaCakes118.exe
Resource
win7-20240704-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
495da4d834e7fd8309af6993e437ab0d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
- Target 495da4d834e7fd8309af6993e437ab0d_JaffaCakes118.exe
- Size 18KB
- Sample240715-mdck2a1frl
- SHA256 54900b234a0a3f1568f7ea4daf86f11dc5246ae6e633696cb9e3a7e570927127
- MD5 495da4d834e7fd8309af6993e437ab0d
- SHA1 512166326eed8ac0bc1e0d4c2f33b23610b18b8f
- SHA512 bb0ddb5ca020d6b447452b9c0a78568f0b1229e6911aebcb4cca525d240fdcb060a7218c9b4e34706ef8e50249fe025d0a96e59688fa5c21a8f09199ef3b85c4
- SSDEEP 192:8SPvYVynWKCY9Ew7rRvzmbXeucCZuPifANmCot1jbONtHSf8F7:RnY0nmghriuucCZcoCotharE8F7
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3540 3992 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\495da4d834e7fd8309af6993e437ab0d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\495da4d834e7fd8309af6993e437ab0d_JaffaCakes118.exe"1⤵PID:3992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3992 -s 3842⤵
- Program crash
PID:3540
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3992 -ip 39921⤵PID:2352