Analysis

  • max time kernel
    138s
  • max time network
    100s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-05-2024 20:03

General

  • Target

    0cb8f1dc418d723575a0654b7cca4fe4_JaffaCakes118.exe

  • Size

    1.9MB

  • MD5

    0cb8f1dc418d723575a0654b7cca4fe4

  • SHA1

    37f807b39ed19420a3d4337f36ef83d0fd4f3326

  • SHA256

    13819108e0ca984ad6e23e27e88a313abaafd8ef0afd641dadb7c4d30d0df361

  • SHA512

    2b024b0394e75dc28909cd87dcdbc3de432cb69ed633568885cbad14a73edebde672e1ad340e1521437fb253d35a6da342afb3f944f0903513ea763bb328e860

  • SSDEEP

    12288:qZox6QBFWSdKDHwHWq9mVmr/FZatvlwmpJ:5x6BSdK7wx75Za9

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0cb8f1dc418d723575a0654b7cca4fe4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0cb8f1dc418d723575a0654b7cca4fe4_JaffaCakes118.exe"
    1⤵
      PID:1856
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1856 -s 432
        2⤵
        • Program crash
        PID:3916
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1856 -s 440
        2⤵
        • Program crash
        PID:816
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1856 -ip 1856
      1⤵
        PID:4592
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 1856 -ip 1856
        1⤵
          PID:4860

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1856-0-0x0000000000820000-0x0000000000A03000-memory.dmp

          Filesize

          1.9MB