Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-06-2024 01:24

General

  • Target

    1847f2bbb5570f459654a5026717219c_JaffaCakes118.exe

  • Size

    28KB

  • MD5

    1847f2bbb5570f459654a5026717219c

  • SHA1

    1d089381c3ba36a541846b25bbc43fe2689d2639

  • SHA256

    bc1e8f5066d1adc3aa1404610c0d22352eaa9effa1dacf507d3f15354e0e859f

  • SHA512

    0cc76f5b138296074c731a21e3bbfe08d0b0f7c78f3e07525fd6e456a7ca285f4abbfb2aff7d0cf77bfac8a21bf48de13891b74f0481b32e0dbce25d64e162e4

  • SSDEEP

    384:yxjDS/7mDt2g1/LzI0CZUwAT2ma3Oz+MajOnySY+2dDHSMXp+InujC:6yatB/LMdncIOz9aSnypd+wplnw

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1847f2bbb5570f459654a5026717219c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1847f2bbb5570f459654a5026717219c_JaffaCakes118.exe"
    1⤵
      PID:2776
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2776 -s 256
        2⤵
        • Program crash
        PID:5064
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2776 -s 264
        2⤵
        • Program crash
        PID:3700
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2776 -ip 2776
      1⤵
        PID:876
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 2776 -ip 2776
        1⤵
          PID:4452

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2776-0-0x0000000000400000-0x0000000000414000-memory.dmp

          Filesize

          80KB