Analysis
-
max time kernel
139s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21/10/2024, 08:33
Static task
static1
Behavioral task
behavioral1
Sample
662725a71fee0030d0514610056ea1d3_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
662725a71fee0030d0514610056ea1d3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
662725a71fee0030d0514610056ea1d3_JaffaCakes118.exe
-
Size
815KB
-
MD5
662725a71fee0030d0514610056ea1d3
-
SHA1
216d26455bdbf08957b0b3bbf7323b3d3354a951
-
SHA256
d9c2825fcb3b09e2ecc5269b6c0029360d35a4835f081c713d7e654be60805c9
-
SHA512
3f1b6d1765fa55d290f13becde937a216ceebdcd9da00d160a79c96d44fbe0a024dc1e9261ab81e8cca4bc7eecbbfb9c08148852bf965a5e7fa094cde02eae64
-
SSDEEP
24576:RiUjiZwrEOy6NJqDTlsBcSR/LOnOrfHj//wS:RiZaFymqDTscCanOTD/oS
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4464 4532 WerFault.exe 83 -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 662725a71fee0030d0514610056ea1d3_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\662725a71fee0030d0514610056ea1d3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\662725a71fee0030d0514610056ea1d3_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4532 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4532 -s 3362⤵
- Program crash
PID:4464
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4532 -ip 45321⤵PID:4836