Analysis

  • max time kernel
    92s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/07/2024, 09:47

General

  • Target

    1ad2c7347b8b4bdbe027a3009b92f65b_JaffaCakes118.exe

  • Size

    152KB

  • MD5

    1ad2c7347b8b4bdbe027a3009b92f65b

  • SHA1

    560c7402d4fd76a3a899160804ca90f147a80cd0

  • SHA256

    a174d6b82f009fe8faaa44ef4780436d5dc92a73803ed144ea83c77e7ea8c7f8

  • SHA512

    4a89e7e88511b6fec3fbf8de96de2fa9aa0b2da11d46da32dc4d4a39e7800e61670f7ff9b9689f62b9ce939e0f481139c61aec5bb8d0ac496a1672e0a65360df

  • SSDEEP

    3072:D4c9KCX9SD86dRCFMbtJxczDQmMp6Pe4Pr/nFcSjdq:Mc9KCo863CKxcoT6jnFlj

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1ad2c7347b8b4bdbe027a3009b92f65b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1ad2c7347b8b4bdbe027a3009b92f65b_JaffaCakes118.exe"
    1⤵
      PID:556
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 556 -s 316
        2⤵
        • Program crash
        PID:2644
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 556 -s 396
        2⤵
        • Program crash
        PID:2200
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 556 -ip 556
      1⤵
        PID:4720
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 556 -ip 556
        1⤵
          PID:1476

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads