Analysis
-
max time kernel
94s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
27-12-2024 00:08
Behavioral task
behavioral1
Sample
JaffaCakes118_bcce35ecd23f43d90a39996b547b2be5c757a38c137cda8b066e125d466e0006.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_bcce35ecd23f43d90a39996b547b2be5c757a38c137cda8b066e125d466e0006.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_bcce35ecd23f43d90a39996b547b2be5c757a38c137cda8b066e125d466e0006.exe
-
Size
1.1MB
-
MD5
40e90751cab2c2cf3af6dffd4e32cadf
-
SHA1
9a41e1db0a506d215ecbf7b7ea36833e8d69a0cb
-
SHA256
bcce35ecd23f43d90a39996b547b2be5c757a38c137cda8b066e125d466e0006
-
SHA512
339697e169fb090934448e5f632766791d40384fbfc93c3f9ae571cfdb43fbdb8bbc0c2377726d08e0f32136b12ee9bbfafc8b85cbeb4af001808cf4e16fb2e1
-
SSDEEP
12288:9U2PUt/eB0i8Es7IFKUjFke7grj8SGWPHc4qDrFIWTvuvcT+L6Fhqfwhffh6nYID:G2HB0i8zIFKUpke6j82I5fnZJ6n7
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3916 2904 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_bcce35ecd23f43d90a39996b547b2be5c757a38c137cda8b066e125d466e0006.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_bcce35ecd23f43d90a39996b547b2be5c757a38c137cda8b066e125d466e0006.exe"1⤵PID:2904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2904 -s 2082⤵
- Program crash
PID:3916
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2904 -ip 29041⤵PID:3776