Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-06-2024 20:35

General

  • Target

    b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe

  • Size

    714KB

  • MD5

    b514e1ca810c72dd3a2695b96bd3c3e7

  • SHA1

    e012e47c03a382650bfe622ca3366f179850a50b

  • SHA256

    10d5b87ca712f37ee567ec47cef40829994fc5fd9e928516679d2dfa43e5e781

  • SHA512

    c7144da2dba8fe928b424137a5e7dd9309cb11c2aa2167f8b52befc673135b21fccdc098ef34154561ce2cad5aa18a292da78825c4beb6c75fd7c6e82ba82419

  • SSDEEP

    1536:cccvVn+/ylGTu/F1A60QXL2bYC/DwWdMkVQq8Yuv0/kbqIzxd:S+KxY60QU/x+OQq8Yuv0/kOUz

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118.exe"
    1⤵
      PID:3068
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3068 -s 220
        2⤵
        • Program crash
        PID:780
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3068 -s 224
        2⤵
        • Program crash
        PID:3600
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3068 -ip 3068
      1⤵
        PID:3344
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3068 -ip 3068
        1⤵
          PID:3476

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads