Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
01-01-2025 13:12
Behavioral task
behavioral1
Sample
JaffaCakes118_56703f21d88286b312a961d8041b2691.exe
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
JaffaCakes118_56703f21d88286b312a961d8041b2691.exe
Resource
win10v2004-20241007-en
1 signatures
150 seconds
General
-
Target
JaffaCakes118_56703f21d88286b312a961d8041b2691.exe
-
Size
255KB
-
MD5
56703f21d88286b312a961d8041b2691
-
SHA1
4e1afeb29981e5ac0beac26e1b8743095671ee68
-
SHA256
83e96f918c41f027a280a1da16c6cd31694be1dda694851e13752ea8c2be3e11
-
SHA512
23c03d76a36fc8dca53169cab4616d60f240ab8d195dcd51a3c2e93d6bab9de97c756a9f500353dc6d54ac9319c4664f3b2951c7320cd04c81fb9018039e4cf4
-
SSDEEP
3072:2nusk9P5XFMcltW9JW2QzinN9oKNr85CBnusk9P5XFMY:2ujMcltcWNuN91R9BujMY
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3176 3028 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_56703f21d88286b312a961d8041b2691.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_56703f21d88286b312a961d8041b2691.exe"1⤵PID:3028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3028 -s 2402⤵
- Program crash
PID:3176
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3028 -ip 30281⤵PID:4376