Analysis
-
max time kernel
139s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
04/11/2024, 01:45
Static task
static1
Behavioral task
behavioral1
Sample
8e8977f6abe1b3deeeab6b12257dfe31_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8e8977f6abe1b3deeeab6b12257dfe31_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8e8977f6abe1b3deeeab6b12257dfe31_JaffaCakes118.exe
-
Size
360KB
-
MD5
8e8977f6abe1b3deeeab6b12257dfe31
-
SHA1
e04e14cc65f462f09048b1b0883fea4f43dac393
-
SHA256
72d5effc412c6eeca4b073c06fc5c1d37e8e279f419d0ac11801a45ab4984788
-
SHA512
ab605569bdc08b2c50aad495e878a463e4372f66491efb130cde9391e4b442e7ab5419186c5ee9c9b2b682e33be84f18db0343fcf3f5b84207ec3686f9d4baa0
-
SSDEEP
6144:3jT/842Wf1mUhmKDWM3LHLf+pNwcBlvaEHXLruGe3lvuJwSrZsSbkxsxx44GjhL:v/8CdmUTWETD+BaE3Lr+lvWrZsSbkW1M
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4004 1428 WerFault.exe 83 -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8e8977f6abe1b3deeeab6b12257dfe31_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e8977f6abe1b3deeeab6b12257dfe31_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8e8977f6abe1b3deeeab6b12257dfe31_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1428 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1428 -s 2842⤵
- Program crash
PID:4004
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1428 -ip 14281⤵PID:1936