Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/05/2024, 17:32

General

  • Target

    35beeb204ab0da457c0e99aed6f1dad5_JaffaCakes118.exe

  • Size

    2.7MB

  • MD5

    35beeb204ab0da457c0e99aed6f1dad5

  • SHA1

    310a005de620caea7915a2df4a8397e75cd76e5a

  • SHA256

    449e662c0c27b0e2838b0e4839589ba8bc1ae607c16bd6932ec5625871bcac00

  • SHA512

    e46c97624be274c5a8fd1a087da06ed1ed40557badee1198a91403423d30b097472b4c66c9a5b07051eab049082f1d12e0b22df09913f1fb61dc2a85894a8a55

  • SSDEEP

    49152:baL13s353Yr/2hATAJTW268TbizX2kjAx2Wap3A62wCoXwQ:WLGV8ueTAJTWsbiaqQ2WaKpoXz

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\35beeb204ab0da457c0e99aed6f1dad5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\35beeb204ab0da457c0e99aed6f1dad5_JaffaCakes118.exe"
    1⤵
      PID:3064
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3064 -s 392
        2⤵
        • Program crash
        PID:4572
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3064 -s 400
        2⤵
        • Program crash
        PID:4484
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3064 -ip 3064
      1⤵
        PID:2320
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 3064 -ip 3064
        1⤵
          PID:3932

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/3064-0-0x00000000022F0000-0x0000000002502000-memory.dmp

                Filesize

                2.1MB

              • memory/3064-1-0x0000000002510000-0x000000000271F000-memory.dmp

                Filesize

                2.1MB

              • memory/3064-2-0x0000000002720000-0x0000000002931000-memory.dmp

                Filesize

                2.1MB

              • memory/3064-8-0x0000000002720000-0x0000000002931000-memory.dmp

                Filesize

                2.1MB

              • memory/3064-16-0x0000000002940000-0x0000000002B41000-memory.dmp

                Filesize

                2.0MB

              • memory/3064-15-0x0000000002720000-0x0000000002931000-memory.dmp

                Filesize

                2.1MB

              • memory/3064-17-0x0000000000400000-0x000000000044C000-memory.dmp

                Filesize

                304KB

              • memory/3064-18-0x0000000002510000-0x000000000271F000-memory.dmp

                Filesize

                2.1MB