6cc10cf0bc6a20d679f9b018049f5e4197a5c7f1264d7709178c7b8c57c4deb0 | Triage

Analysis

max time kernel
131s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
04/05/2024, 14:08

Sharing

Report Analysis Logs

General

Target

13101419a5db90bd57f2a9ff445cb297_JaffaCakes118.exe
Size

322KB
MD5

13101419a5db90bd57f2a9ff445cb297
SHA1

0439638d87cf8e82c61dc9d70b5b0d49f050dd63
SHA256

6cc10cf0bc6a20d679f9b018049f5e4197a5c7f1264d7709178c7b8c57c4deb0
SHA512

2b15ba1b4f64d1d69a1dc5f3f23d707105be4de411246f0063c7ce921da20e976a1f77be4f9697998179361af54b6cfd836683c51d0a187899574d4e8af38552
SSDEEP

6144:MUJwFed/o/fn6mhoiN7KhKBN7wJbbCfP:MLg8f6Goo7gbE

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3320	4880	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\13101419a5db90bd57f2a9ff445cb297_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\13101419a5db90bd57f2a9ff445cb297_JaffaCakes118.exe"
1⤵
PID:4880
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4880 -s 248
  2⤵
  - Program crash
  PID:3320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4880 -ip 4880
1⤵
PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4880-0-0x00000000005E0000-0x0000000000611000-memory.dmp

Filesize
196KB

Download
memory/4880-1-0x00000000001F0000-0x00000000001F1000-memory.dmp

Filesize
4KB

Download