Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    25-06-2024 21:52

General

  • Target

    0fa9df10a174477ae8f246d7904881db_JaffaCakes118.exe

  • Size

    812KB

  • MD5

    0fa9df10a174477ae8f246d7904881db

  • SHA1

    a7f6d15aa74002fc6dac3fbe0411515e498affa3

  • SHA256

    9c36c55a75d38e5ace42cd804e1dfaacfae1b29da780a6a74838d1f177f0b842

  • SHA512

    9a1098cf86bf63151f7989aacfc19886e03ac7c7f1b47eae34717d2b6b7a1bf896dfc437487ed65152936a1c0742f76426ef1e2f822f5ebe79f86a2c8e740ae7

  • SSDEEP

    24576:qggeIHpFmZqAgG4Mwb/rHV79VqZE7bSD6Hx8:qgHCJDHY2fSDIx8

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0fa9df10a174477ae8f246d7904881db_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0fa9df10a174477ae8f246d7904881db_JaffaCakes118.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1052
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1052 -s 204
      2⤵
      • Program crash
      PID:1320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1052-0-0x0000000000400000-0x00000000004DA000-memory.dmp

    Filesize

    872KB