Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/06/2024, 04:53

General

  • Target

    8cf04e11895024c4d49b31ea597fef9f_JaffaCakes118.exe

  • Size

    688KB

  • MD5

    8cf04e11895024c4d49b31ea597fef9f

  • SHA1

    e48e2a03152deee0f22a32ea83163aa01ca88fed

  • SHA256

    05b27fce887a1ac372e5adc4ec4a1fad13b5727289a0811cf8f2b9ba5ed31a23

  • SHA512

    481a8b46029e674dc85ec38b15e047e29696dd94f7b5ef3cd221b3673b27b0e6eeffe90b94fd930af9390bb0f1589ae6e24c3e73f3edf77e8649fb39b9f422fe

  • SSDEEP

    12288:yAoCp1BbY7dBHFB9+VXeVP2cEAGaGhDz/uWwGPgJJIMeLiPrMGDFGAMap21:y5CjtYHFX+VXmwHTvXvPyeLiPrMXAu

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8cf04e11895024c4d49b31ea597fef9f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8cf04e11895024c4d49b31ea597fef9f_JaffaCakes118.exe"
    1⤵
      PID:1452
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1452 -s 484
        2⤵
        • Program crash
        PID:1544
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1452 -ip 1452
      1⤵
        PID:3192

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/1452-0-0x0000000000400000-0x0000000000414000-memory.dmp

              Filesize

              80KB

            • memory/1452-3-0x0000000000401000-0x000000000040B000-memory.dmp

              Filesize

              40KB

            • memory/1452-5-0x0000000000400000-0x0000000000414000-memory.dmp

              Filesize

              80KB