Analysis
-
max time kernel
148s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
23/07/2024, 09:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
671eac8046115ef4bc903234768b649b_JaffaCakes118.exe
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
671eac8046115ef4bc903234768b649b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
-
Target
671eac8046115ef4bc903234768b649b_JaffaCakes118.exe
-
Size
84KB
-
MD5
671eac8046115ef4bc903234768b649b
-
SHA1
e00f1e27165b1c409dd445be11779343f7c08d4c
-
SHA256
dfa53b7ed6af6dfae37b2c5b0eb5d9c1bda7c29ae0b57e52203381c70a0624f0
-
SHA512
21edbe72a00883351d3e86c5c722eb18ed0f02483710b03a3882396086f6ec77fc7407ef7dbecbceedae261a4e86803b077c041d1a5b6db51cd3e5588c6f79c9
-
SSDEEP
1536:tTpcJCIGXmmfIS54ejTgcq/7zHyyiURrzNcvdyyIlrL4A:ttcJCIADISpu/7Wkrpc1fkrEA
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3460 392 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\671eac8046115ef4bc903234768b649b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\671eac8046115ef4bc903234768b649b_JaffaCakes118.exe"1⤵PID:392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 392 -s 3722⤵
- Program crash
PID:3460
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 392 -ip 3921⤵PID:532