Overview

overview

3

Static

static

3

194d7454e0...18.exe

windows7-x64

3

194d7454e0...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/06/2024, 07:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    194d7454e0e22725b9be2b008915033a_JaffaCakes118.exe

  • Size

    24KB

  • MD5

    194d7454e0e22725b9be2b008915033a

  • SHA1

    3e1dcd9c12eb4becd2b9eba7e4243a1b5686e060

  • SHA256

    5f74f70586faa6bf9e9db1cc052fb39872cbf6b91a4d77b4c47778b6fbfcf275

  • SHA512

    8fc2432e1f5e486cace903f017411a8654e0dcad04720ddd5832e40da530f7df659c8476d03a4e911598b6fb9bff687ab55275f4cf90b48d09d88b72656da705

  • SSDEEP

    192:xr0LXhH4yfuCAuVT+Q/5MpWX9Y3rzmCJm2mbkBlO3T5cByGvsy5fMy:x4ThxGCjcQxea9C/yN8fKy

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\194d7454e0e22725b9be2b008915033a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\194d7454e0e22725b9be2b008915033a_JaffaCakes118.exe"
    1⤵
      PID:928
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 928 -s 232
        2⤵
        • Program crash
        PID:4480
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 928 -s 264
        2⤵
        • Program crash
        PID:4996
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 928 -ip 928
      1⤵
        PID:1912
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 928 -ip 928
        1⤵
          PID:4268

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/928-0-0x0000000000400000-0x0000000000415000-memory.dmp

                Filesize

                84KB

                Download