Overview

overview

7

Static

static

3

1f9e02d0ae...18.exe

windows7-x64

7

1f9e02d0ae...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    136s
  • max time network
    99s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-05-2024 05:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1f9e02d0aeeb210a13937741e0b56dd6_JaffaCakes118.exe

  • Size

    800KB

  • MD5

    1f9e02d0aeeb210a13937741e0b56dd6

  • SHA1

    6f9cc285913d2f86ba2977d9c303a35f2adad383

  • SHA256

    29495917e026c8ad0b973705b8d428f0974c87463bb795e3b1473245ed89ece9

  • SHA512

    d635a5925812cc628bd40c02794fcf6d8a88a67ec64b2fccdfcb22f61427da690ceb332820278f344ada45f5a1efb2bf6a8379b175c33178716c147357c85c15

  • SSDEEP

    12288:zxX5chJeWOzeDju1oqGbOfQjSHFg4Z5a2MigMWJaNy/+ebafF74n1YUi0r:zxXyLFWeXmfQjSH5Z5vgSebc747i

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1f9e02d0aeeb210a13937741e0b56dd6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1f9e02d0aeeb210a13937741e0b56dd6_JaffaCakes118.exe"
    1⤵
      PID:4092
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4092 -s 928
        2⤵
        • Program crash
        PID:4692
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4092 -ip 4092
      1⤵
        PID:1432

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4092-0-0x0000000000400000-0x0000000000636000-memory.dmp

        Filesize

        2.2MB

        Download