Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    26-06-2024 00:12

General

  • Target

    100b8c5b6bef04961c7ebbb5975f42c1_JaffaCakes118.exe

  • Size

    167KB

  • MD5

    100b8c5b6bef04961c7ebbb5975f42c1

  • SHA1

    9e6f5f6bb8e21cbb214fe75eec6094c53ae5a8d4

  • SHA256

    0f9a3c4f7bc7da2581418fa6a2bc104df40f136dda2eadbe5901b9611eff3314

  • SHA512

    0f7502661b6b586d5b1becbb5728868d9acd3a2bc2e3ea6cacdc8cb53c40a0556f990eb9fe4ebc0515b9bd949815a69726ef0423521a4fba7e5a896aa50519b9

  • SSDEEP

    3072:kYNQKPWDydRefVJltZrpRl1P3zRfx7nWdOeyY2wCSKoEd2AVX0txf:lNSDydRO1thpVRgd8YNC2Hy0zf

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\100b8c5b6bef04961c7ebbb5975f42c1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\100b8c5b6bef04961c7ebbb5975f42c1_JaffaCakes118.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2200
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 160
      2⤵
      • Program crash
      PID:1084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2200-0-0x0000000001000000-0x0000000001027000-memory.dmp

    Filesize

    156KB