Overview

overview

3

Static

static

3

0a1ebf120f...18.exe

windows7-x64

1

0a1ebf120f...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    51s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/06/2024, 18:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0a1ebf120f16a4c2196342fe5928c6d8_JaffaCakes118.exe

  • Size

    48KB

  • MD5

    0a1ebf120f16a4c2196342fe5928c6d8

  • SHA1

    41121565d59acb1cae3af583d7dbe35df7a848f2

  • SHA256

    9a13f718c6ff7a9a72c204323d45019476cf3bf71b28a166bf79e1fb802676d1

  • SHA512

    34edd4fbcd2d70941c1d8e2a8d637f9ff18f70a45bc07c48719d20907f55e835138fe3507a21576c7456b8e0476803a2284435611ee8ed0596511bcdb623a184

  • SSDEEP

    768:MLN+rJdWvra/CjeRA6xcQEIKkPH/rhr4gtK5su06Q2kaNxM/nV8zZ:MLN+Fds6xw6hrtQ5wEL0QZ

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0a1ebf120f16a4c2196342fe5928c6d8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0a1ebf120f16a4c2196342fe5928c6d8_JaffaCakes118.exe"
    1⤵
      PID:1872
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1872 -s 252
        2⤵
        • Program crash
        PID:4500
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1872 -ip 1872
      1⤵
        PID:4532

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1872-0-0x0000000000400000-0x0000000000476000-memory.dmp

        Filesize

        472KB

        Download

      • memory/1872-1-0x0000000000400000-0x0000000000476000-memory.dmp

        Filesize

        472KB

        Download