Overview

overview

3

Static

static

3

05feb66af4...18.exe

windows7-x64

3

05feb66af4...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    136s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/06/2024, 12:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    05feb66af4b599544ec30d35c4b208e2_JaffaCakes118.exe

  • Size

    372KB

  • MD5

    05feb66af4b599544ec30d35c4b208e2

  • SHA1

    00005e7c49fe0b9a0b3a615711afb870fd22e828

  • SHA256

    ef4e4855efab8ee4685d74664716389392bf676256163638d1478f5e05f7a629

  • SHA512

    5dab05aae643ea869f24fc4c7052489153e70667847b6275c20234f9f727ffb09b9df7ab565c67303e821153c0c04b580fc89a626fa50816a8aed13a36273c40

  • SSDEEP

    6144:ipZ9OJRyf/HIKC8n7DJrfB3+ps0OqLVJ5bbZXegqw48gyH0YtnbvK/kFZj:yOvyXH7DJrp3DWJtbZU8JFtrymB

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\05feb66af4b599544ec30d35c4b208e2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\05feb66af4b599544ec30d35c4b208e2_JaffaCakes118.exe"
    1⤵
      PID:2220
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2220 -s 452
        2⤵
        • Program crash
        PID:4356
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2220 -ip 2220
      1⤵
        PID:3100

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/2220-1-0x0000000000400000-0x0000000000472000-memory.dmp

              Filesize

              456KB

              Download