Analysis

  • max time kernel
    93s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/04/2024, 01:14

General

  • Target

    f4bbea299f5b53ee792bf18871a8db2d_JaffaCakes118.exe

  • Size

    89KB

  • MD5

    f4bbea299f5b53ee792bf18871a8db2d

  • SHA1

    3bada8652ca80b2dc5098dce438aaa58939fd8b5

  • SHA256

    a1c51765e2d0ee9f291e019662ab7cbac7fc3e5299375317c4a11b140cc25689

  • SHA512

    19bfbc4f4b774cb77c65ad5a11e504184e2aca68e3e3e14f56461a13f96e47e939db186862beecdb769175c95515d60b517ccd02c38aa2b0dbdb83c4eef9a7b4

  • SSDEEP

    1536:1skKNqRSQ911QzZ0zCVbRbKxgH6yxhEpU5Q4dBxfKF896zEcBWB/hSJAbteIxGTY:1s9NUSKbeZUmtKxRyxOe5RdBQG9cBWpP

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f4bbea299f5b53ee792bf18871a8db2d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f4bbea299f5b53ee792bf18871a8db2d_JaffaCakes118.exe"
    1⤵
      PID:212
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 212 -s 388
        2⤵
        • Program crash
        PID:4480
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 212 -ip 212
      1⤵
        PID:3156

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/212-0-0x0000000000400000-0x0000000000424000-memory.dmp

              Filesize

              144KB

            • memory/212-1-0x0000000000400000-0x0000000000424000-memory.dmp

              Filesize

              144KB