b97ab59bfbe97e2707617bc41baf5b81cb6b43885ec48fd6e37f2479a24b3929 | Triage

Analysis

max time kernel
51s
max time network
54s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28-06-2024 02:12

Sharing

Report Analysis Logs

General

Target

186aaacada932b05ceb54aee35817ec2_JaffaCakes118.exe
Size

256KB
MD5

186aaacada932b05ceb54aee35817ec2
SHA1

4d5461435be9da26b9e5548dbc0fa056a3e00f4e
SHA256

b97ab59bfbe97e2707617bc41baf5b81cb6b43885ec48fd6e37f2479a24b3929
SHA512

2c16e98763001de25ecb2782cde20c64b2b97eafceba17784b14af1ac71d59d0f0f39c42b69478f8e5b4e440f1dbd656632bbfbcb0315a669773d4452da7134c
SSDEEP

6144:YnoQVCT+oworKeMXfpoF+kT5YTGjmHEP:YnDVO5CsNYSmHEP

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3908	1060	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\186aaacada932b05ceb54aee35817ec2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\186aaacada932b05ceb54aee35817ec2_JaffaCakes118.exe"
1⤵
PID:1060
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1060 -s 440
  2⤵
  - Program crash
  PID:3908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1060 -ip 1060
1⤵
PID:1760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1060-0-0x0000000000429000-0x0000000000436000-memory.dmp

Filesize
52KB

Download