Overview

overview

3

Static

static

3

16de6fd701...18.exe

windows7-x64

3

16de6fd701...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/06/2024, 17:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    16de6fd70157360219eb6d3b47b759fc_JaffaCakes118.exe

  • Size

    43KB

  • MD5

    16de6fd70157360219eb6d3b47b759fc

  • SHA1

    bfc3cd7edb7510d9220f3625bdc5959119126ab8

  • SHA256

    be8de4b6c4354068cb32083cc8dd3f75d146e02d97c2d63441f13114c9e38d43

  • SHA512

    f678d6b480cfee956354d17a78a66827bf65b49fc2e4c22306b63b57cecb66c8e3f9f2616a777310d3c1a341989884396942de00ba1830feeba02b0568a9c4f4

  • SSDEEP

    768:v3prGFIBn84R5Z7uZAZfIf4dw9JhLLKbcYML+VH2yoLCcJH:RrGSnH7CCXKLLLAcL+cyoWcJH

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\16de6fd70157360219eb6d3b47b759fc_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\16de6fd70157360219eb6d3b47b759fc_JaffaCakes118.exe"
    1⤵
      PID:3684
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3684 -s 244
        2⤵
        • Program crash
        PID:1620
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 3684 -ip 3684
      1⤵
        PID:232

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3684-0-0x0000000000400000-0x0000000000442000-memory.dmp

        Filesize

        264KB

        Download

      • memory/3684-1-0x0000000000400000-0x0000000000442000-memory.dmp

        Filesize

        264KB

        Download