48fb8f3984f66c1d0408391d382ec5f98d3e8ec732a01e0ac8368d1e5bca59f3 | Triage

Analysis

max time kernel
101s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
17/04/2024, 19:41

Sharing

Report Analysis Logs

General

Target

f686c302e17481c674beb5fd462c992a_JaffaCakes118.exe
Size

442KB
MD5

f686c302e17481c674beb5fd462c992a
SHA1

c5e51f2893ce49705874988d72d4623b6aa23f55
SHA256

48fb8f3984f66c1d0408391d382ec5f98d3e8ec732a01e0ac8368d1e5bca59f3
SHA512

f753d79e5998c43d060eb41784e61697faa15fb17a6fec1542771982d799cb8d966c6e29335e0b0bde550cc2010c35a01248df54a6baa97aebdadea54e6dbf3b
SSDEEP

12288:8jBQwv5OfqUxtOG9IraOfCBVhflnYrCS:8jrvs7tO6KqB

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2324	1156	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\f686c302e17481c674beb5fd462c992a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f686c302e17481c674beb5fd462c992a_JaffaCakes118.exe"
1⤵
PID:1156
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1156 -s 416
  2⤵
  - Program crash
  PID:2324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 1156 -ip 1156
1⤵
PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads