Analysis

  • max time kernel
    95s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-04-2024 11:00

General

  • Target

    fa27c7af6de99e48c9055d0ef66c6cab_JaffaCakes118.exe

  • Size

    106KB

  • MD5

    fa27c7af6de99e48c9055d0ef66c6cab

  • SHA1

    55f5e61e2f5565c348e0040fc4415b5637d8f011

  • SHA256

    39d6914fb540a9d54d0f1d4361b60a4279057fd3b6b371364f1b92e8d5b12f82

  • SHA512

    2f9ea2857c800379525df9386f3e33d2c014a6f00d25bfb5596ccaae206517fb9f028243dac70f723e28ac730b72dcfb725608ed79bc665993017c45ea214ade

  • SSDEEP

    1536:RBRYyhrE2e4acoQdKXHu5RZ42g5nBkv3lkD0cOFcYZOcTuNyk2DippOV:bq8e4hdK3uaG/hcTOaD9p

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fa27c7af6de99e48c9055d0ef66c6cab_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fa27c7af6de99e48c9055d0ef66c6cab_JaffaCakes118.exe"
    1⤵
      PID:2912
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2912 -s 312
        2⤵
        • Program crash
        PID:4260
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2912 -ip 2912
      1⤵
        PID:4668

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2912-0-0x0000000000400000-0x0000000000435000-memory.dmp

        Filesize

        212KB

      • memory/2912-1-0x0000000000400000-0x0000000000435000-memory.dmp

        Filesize

        212KB