d25ccad747c117825635cd16b46cc804c99be42c93a729324bd32d7721ba80d8

Analysis

max time kernel
141s
max time network
123s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
26/06/2024, 01:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

10325bb2b521e14b55d9596a6d6256b5_JaffaCakes118.exe
Size

376KB
MD5

10325bb2b521e14b55d9596a6d6256b5
SHA1

1ff4e77a3d731b6fd98e6a15ec4f78e44037cbeb
SHA256

d25ccad747c117825635cd16b46cc804c99be42c93a729324bd32d7721ba80d8
SHA512

efc163a444d279d30a83f6572f79a765d89f3659575b6d6b49bf0fb4379ea3812b9e07e0d949827cf05a770101302ca58f8cfd1725d39e8ac29b6edc2d8fab16
SSDEEP

6144:N8tMTY9y5tYROkIVqtBjQa2rgu/aC7pcxsEQvYP6UY4rQxw9M4Dp4PHloq:NkMp5sOkBxr2rbHpcxsEQQ6iQxYM4DpI

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2684	1968	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1968 wrote to memory of 2684	1968	10325bb2b521e14b55d9596a6d6256b5_JaffaCakes118.exe	28
PID 1968 wrote to memory of 2684	1968	10325bb2b521e14b55d9596a6d6256b5_JaffaCakes118.exe	28
PID 1968 wrote to memory of 2684	1968	10325bb2b521e14b55d9596a6d6256b5_JaffaCakes118.exe	28
PID 1968 wrote to memory of 2684	1968	10325bb2b521e14b55d9596a6d6256b5_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\10325bb2b521e14b55d9596a6d6256b5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\10325bb2b521e14b55d9596a6d6256b5_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1968
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1968 -s 168
  2⤵
  - Program crash
  PID:2684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1968-3-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-1-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-0-0x0000000000401000-0x0000000000403000-memory.dmp

Filesize
8KB

Download
memory/1968-4-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-13-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-12-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-16-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-15-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-14-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-10-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-9-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-8-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-7-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-6-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-5-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-17-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1968-18-0x0000000000401000-0x0000000000403000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads