Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
23-12-2024 14:54
Behavioral task
behavioral1
Sample
JaffaCakes118_3e3effbebddb2c758dc8d244a1c2e0334631dedfa24ec091edebadfaff7e1c5b.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3e3effbebddb2c758dc8d244a1c2e0334631dedfa24ec091edebadfaff7e1c5b.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_3e3effbebddb2c758dc8d244a1c2e0334631dedfa24ec091edebadfaff7e1c5b.exe
-
Size
41.8MB
-
MD5
8a83c69291e43b794ca1ee634a2e1908
-
SHA1
4e37a2281258f54c5182bb69acc4d5dd9c3ee8f8
-
SHA256
3e3effbebddb2c758dc8d244a1c2e0334631dedfa24ec091edebadfaff7e1c5b
-
SHA512
8f8f1b698a7541ecbb92ff4f7ba3a0e3abc860c6865c82c0ed828d870ceec8945d8500ea27fbf6149ba48e9a610b9fa2a0b29e662bb722979631765bcba8c6d0
-
SSDEEP
6144:Jdd1W8LyqcUao/5YmM9aiMqwWVu98tE/vLTBwIe8gn+DJngjC:J1LRxao/WZ0ivwWVu98tZbnw
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3592 4100 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3e3effbebddb2c758dc8d244a1c2e0334631dedfa24ec091edebadfaff7e1c5b.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3e3effbebddb2c758dc8d244a1c2e0334631dedfa24ec091edebadfaff7e1c5b.exe"1⤵PID:4100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4100 -s 1402⤵
- Program crash
PID:3592
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4100 -ip 41001⤵PID:368