Analysis
-
max time kernel
141s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
22-07-2024 11:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
630b279b3446dc68b7934f5006c67066_JaffaCakes118.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
630b279b3446dc68b7934f5006c67066_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
630b279b3446dc68b7934f5006c67066_JaffaCakes118.exe
-
Size
52KB
-
MD5
630b279b3446dc68b7934f5006c67066
-
SHA1
8ed92cdbea3448ed8c4522f604daad7ce00ce8fa
-
SHA256
1571d51b0d36c56b6334bb6b0d47a0cba210c7a8f2c35d48d15b8077b5de1542
-
SHA512
d342281c77263a3abc6333f730248bd60a1f98d84edca769971c034052add41a24843271c5359f82b307c2eecd208866149672deaf3f1ba25be9f8a2fd52e8fe
-
SSDEEP
768:VG4Z/ija+1IdNCa4oWoOlm+rHvTA79ArEBlglkbz+XafU3vXyeCS:VGiNxoLbA7KrEBlglWz2akXyeCS
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4292 1076 WerFault.exe 83 4228 1076 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\630b279b3446dc68b7934f5006c67066_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\630b279b3446dc68b7934f5006c67066_JaffaCakes118.exe"1⤵PID:1076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1076 -s 3762⤵
- Program crash
PID:4292
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1076 -s 3722⤵
- Program crash
PID:4228
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1076 -ip 10761⤵PID:1156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 1076 -ip 10761⤵PID:640