Analysis

  • max time kernel
    92s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-05-2024 12:06

General

  • Target

    7ce38af39a8a9588b930fcc291d0a861_JaffaCakes118.exe

  • Size

    470KB

  • MD5

    7ce38af39a8a9588b930fcc291d0a861

  • SHA1

    2f57d0c6564639007b088f9c1a3697b794c2da60

  • SHA256

    9098f0211336dde46f0926d091e07ece19264c1dc3ade2fbe77fe400b77ddff9

  • SHA512

    e11951a993928a06668ea3bc4aaab171814ba14ae3cff1459f3fe6692d2147996134db52139435250ae988d94bbfee4666681e96d2eed45edb0cf630ce8d16b9

  • SSDEEP

    6144:5hbgAhWul2/gyy9S2qTpSZleQgNnXzr9E09gLH8ChNTR82VTb9BYFKvFZUx33CpQ:USWO2oF98MZleQSLChNTqElM9M4t

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7ce38af39a8a9588b930fcc291d0a861_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\7ce38af39a8a9588b930fcc291d0a861_JaffaCakes118.exe"
    1⤵
      PID:1204
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1204 -s 1184
        2⤵
        • Program crash
        PID:3656
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1204 -ip 1204
      1⤵
        PID:1396

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1204-1-0x0000000000A80000-0x0000000000A81000-memory.dmp

        Filesize

        4KB

      • memory/1204-0-0x0000000000A70000-0x0000000000A71000-memory.dmp

        Filesize

        4KB

      • memory/1204-3-0x0000000000AA0000-0x0000000000AA1000-memory.dmp

        Filesize

        4KB

      • memory/1204-2-0x0000000000A90000-0x0000000000A92000-memory.dmp

        Filesize

        8KB

      • memory/1204-5-0x0000000000AE0000-0x0000000000AE1000-memory.dmp

        Filesize

        4KB

      • memory/1204-4-0x0000000000AB0000-0x0000000000AB1000-memory.dmp

        Filesize

        4KB

      • memory/1204-14-0x0000000003150000-0x0000000003151000-memory.dmp

        Filesize

        4KB

      • memory/1204-13-0x0000000003140000-0x0000000003141000-memory.dmp

        Filesize

        4KB

      • memory/1204-12-0x0000000000F70000-0x0000000000F71000-memory.dmp

        Filesize

        4KB

      • memory/1204-11-0x0000000000F60000-0x0000000000F61000-memory.dmp

        Filesize

        4KB

      • memory/1204-10-0x0000000000F50000-0x0000000000F51000-memory.dmp

        Filesize

        4KB

      • memory/1204-9-0x0000000000F40000-0x0000000000F41000-memory.dmp

        Filesize

        4KB

      • memory/1204-8-0x0000000000EE0000-0x0000000000EE1000-memory.dmp

        Filesize

        4KB

      • memory/1204-7-0x0000000000B00000-0x0000000000B01000-memory.dmp

        Filesize

        4KB

      • memory/1204-6-0x0000000000AF0000-0x0000000000AF1000-memory.dmp

        Filesize

        4KB

      • memory/1204-15-0x0000000000F30000-0x0000000000F32000-memory.dmp

        Filesize

        8KB

      • memory/1204-22-0x0000000002D80000-0x0000000002D81000-memory.dmp

        Filesize

        4KB

      • memory/1204-21-0x0000000002D70000-0x0000000002D71000-memory.dmp

        Filesize

        4KB

      • memory/1204-20-0x0000000002D60000-0x0000000002D61000-memory.dmp

        Filesize

        4KB

      • memory/1204-19-0x0000000000F20000-0x0000000000F21000-memory.dmp

        Filesize

        4KB

      • memory/1204-18-0x0000000000F10000-0x0000000000F11000-memory.dmp

        Filesize

        4KB

      • memory/1204-17-0x0000000000F00000-0x0000000000F01000-memory.dmp

        Filesize

        4KB

      • memory/1204-16-0x0000000000EF0000-0x0000000000EF1000-memory.dmp

        Filesize

        4KB

      • memory/1204-23-0x0000000002D90000-0x0000000002D91000-memory.dmp

        Filesize

        4KB

      • memory/1204-25-0x0000000004680000-0x0000000004681000-memory.dmp

        Filesize

        4KB

      • memory/1204-24-0x0000000004670000-0x0000000004671000-memory.dmp

        Filesize

        4KB