46073c30185d973ac5b231b630e9b0746c623cc304dc385df635872afd877c5b | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
28/04/2024, 13:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0547f2560e2b568afd1232ac20049f88_JaffaCakes118.exe
Size

1.6MB
MD5

0547f2560e2b568afd1232ac20049f88
SHA1

d9f3ff40424409bd11047159795580aea1d2cd9d
SHA256

46073c30185d973ac5b231b630e9b0746c623cc304dc385df635872afd877c5b
SHA512

1e74a90564137d47b76c34af41093ec0bfa3001a7ae3920d69d7ea66900f3a83d4809228558d3cc6bd7e9f8b596e38e598b66b5d562b7f6b12047e659e6fb56c
SSDEEP

49152:Cbl0Mnz65yNfTTmkELEUGU7/3D/rsqK6:cO5wT3Yx73fsq

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2504	1600	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1600 wrote to memory of 2504	1600	0547f2560e2b568afd1232ac20049f88_JaffaCakes118.exe	28
PID 1600 wrote to memory of 2504	1600	0547f2560e2b568afd1232ac20049f88_JaffaCakes118.exe	28
PID 1600 wrote to memory of 2504	1600	0547f2560e2b568afd1232ac20049f88_JaffaCakes118.exe	28
PID 1600 wrote to memory of 2504	1600	0547f2560e2b568afd1232ac20049f88_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\0547f2560e2b568afd1232ac20049f88_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0547f2560e2b568afd1232ac20049f88_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1600
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1600 -s 556
  2⤵
  - Program crash
  PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1600-0-0x0000000000E00000-0x0000000000FA8000-memory.dmp

Filesize
1.7MB

Download
memory/1600-1-0x0000000074590000-0x0000000074C7E000-memory.dmp

Filesize
6.9MB

Download
memory/1600-2-0x0000000074590000-0x0000000074C7E000-memory.dmp

Filesize
6.9MB

Download