Analysis
-
max time kernel
133s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19-08-2024 16:40
Static task
static1
Behavioral task
behavioral1
Sample
abc5c5d939f1bb097c6caaf405ea952b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
abc5c5d939f1bb097c6caaf405ea952b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abc5c5d939f1bb097c6caaf405ea952b_JaffaCakes118.exe
-
Size
433KB
-
MD5
abc5c5d939f1bb097c6caaf405ea952b
-
SHA1
1dc98b3243243402ee6b4cfa8b93c196a426a154
-
SHA256
1c0b96ea2a4ead6cdb2b0ab17dc8fcf365726d58cc4a04edbc2d3b6ce6e9cd6c
-
SHA512
d3d76f0a6d6e3794111cdd7d9c4fa7bcad58ea1178ec5f2e376a3444b045866f3dd9307c9a6a2a52957ab093986e8fb84f031e111ae2a9141fd856ac05339830
-
SSDEEP
6144:O5jmq1TQn9Q2eZEIRU77RsjLbv27iNmZj6Y5Up1E0YYCoa:O5jm6Q9Q2eZEImRy9NmZ9Cp1xaz
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4968 3552 WerFault.exe 83 -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language abc5c5d939f1bb097c6caaf405ea952b_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\abc5c5d939f1bb097c6caaf405ea952b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\abc5c5d939f1bb097c6caaf405ea952b_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3552 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3552 -s 5042⤵
- Program crash
PID:4968
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3552 -ip 35521⤵PID:4736