Analysis
-
max time kernel
93s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05-10-2024 08:07
Static task
static1
Behavioral task
behavioral1
Sample
16dc938563ae15da173e7e221b154445_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
16dc938563ae15da173e7e221b154445_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16dc938563ae15da173e7e221b154445_JaffaCakes118.exe
-
Size
183KB
-
MD5
16dc938563ae15da173e7e221b154445
-
SHA1
1fc0e6f5145824034a9ab123c56891ed75ca10e9
-
SHA256
23eef5b269e23e1d65f677415336fc2952996925dd9dc52fd42c41ba71988e9d
-
SHA512
40d5a33062fd513580919edf9df42de51375c9134698635b3c114354fb2ac74e46f0de1a5ff35f81b4bca2ec18a766b71d35ad8fa860b88b40aaac27f0314995
-
SSDEEP
3072:hKBC5CH+x3Ggu2w95YeoLoSqtIz1eNLKBC5CH+x3Ggu2w95YeoLoSqtIz1:YBC564+bYe5tzEBC564+bYe5t
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2736 1508 WerFault.exe 81 -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 16dc938563ae15da173e7e221b154445_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\16dc938563ae15da173e7e221b154445_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\16dc938563ae15da173e7e221b154445_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1508 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1508 -s 4362⤵
- Program crash
PID:2736
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1508 -ip 15081⤵PID:5072