Analysis

  • max time kernel
    93s
  • max time network
    113s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/04/2024, 11:34

General

  • Target

    f5ac7c47a378808f0e4a6d7aea1e3ee8_JaffaCakes118.exe

  • Size

    118KB

  • MD5

    f5ac7c47a378808f0e4a6d7aea1e3ee8

  • SHA1

    7596c6bd852dcb9cf7a3e86bc9c8e18db980c6b2

  • SHA256

    e82990357224b58d209f876b7920d55af53a2831441b8022b0704d734b82dbb0

  • SHA512

    2c5ec0c80c276dda84cfa678f4b5d45bfe348d4f074b7ae2b416d787c4bd3dc53f7f5f8285063cc41b7dd2bb0b36299921642617c919bb7fe7a490df61055777

  • SSDEEP

    3072:Uby02XXCUUgMWIEOiv4frUDs248gEkb5zBiWeeyddTJ9p:l9ZCivYrss18gEk5zBixJDp

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f5ac7c47a378808f0e4a6d7aea1e3ee8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f5ac7c47a378808f0e4a6d7aea1e3ee8_JaffaCakes118.exe"
    1⤵
      PID:2132
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2132 -s 224
        2⤵
        • Program crash
        PID:4744
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2132 -ip 2132
      1⤵
        PID:4952

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2132-0-0x0000000000400000-0x000000000044F000-memory.dmp

        Filesize

        316KB

      • memory/2132-1-0x0000000000400000-0x000000000044F000-memory.dmp

        Filesize

        316KB