Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/04/2024, 21:50

General

  • Target

    fdb9c80a0da3937f08a5ab87e9d6a368_JaffaCakes118.exe

  • Size

    264KB

  • MD5

    fdb9c80a0da3937f08a5ab87e9d6a368

  • SHA1

    42ea86c4f9f7b284bc6b91cbd217ec0898b7b5f9

  • SHA256

    db08e8e975a26558319d0004e3f0fb987ba52fa67c36b43619ed8efd71f51675

  • SHA512

    68fc4ebdd96986eb0a1b2f0a87ddb969290a65cb34605bc9c6328fb3f9a4127ff6be723f1fd055f66db42aa3cb48cd28a619d56f316ff12a922eb4d06d4da17c

  • SSDEEP

    6144:0aEqaPougeuaRJ1ZL02vIMbZsXCv0vKvf8QLBBzAM+GuN8ZpQP:0I+geuaVOA9oCv0ClLbzL+GI

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fdb9c80a0da3937f08a5ab87e9d6a368_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fdb9c80a0da3937f08a5ab87e9d6a368_JaffaCakes118.exe"
    1⤵
      PID:2352
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2352 -s 316
        2⤵
        • Program crash
        PID:2796
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2352 -ip 2352
      1⤵
        PID:3960

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/2352-0-0x0000000000400000-0x0000000000472000-memory.dmp

              Filesize

              456KB

            • memory/2352-1-0x0000000000590000-0x00000000005CE000-memory.dmp

              Filesize

              248KB

            • memory/2352-3-0x0000000000770000-0x0000000000771000-memory.dmp

              Filesize

              4KB

            • memory/2352-2-0x0000000000590000-0x00000000005CE000-memory.dmp

              Filesize

              248KB

            • memory/2352-6-0x0000000000400000-0x0000000000472000-memory.dmp

              Filesize

              456KB

            • memory/2352-5-0x0000000000400000-0x0000000000472000-memory.dmp

              Filesize

              456KB

            • memory/2352-7-0x0000000000790000-0x0000000000791000-memory.dmp

              Filesize

              4KB

            • memory/2352-4-0x0000000000780000-0x0000000000782000-memory.dmp

              Filesize

              8KB

            • memory/2352-8-0x0000000000400000-0x0000000000472000-memory.dmp

              Filesize

              456KB

            • memory/2352-9-0x0000000000590000-0x00000000005CE000-memory.dmp

              Filesize

              248KB