Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
03/07/2024, 22:55
General
-
Target
23bebf330f775a5ef583df8eff9e1379_JaffaCakes118.exe
-
Size
516KB
-
MD5
23bebf330f775a5ef583df8eff9e1379
-
SHA1
8504b764404634a52c5f9d2c53056559f70498d1
-
SHA256
80d99819364ce9688235fb788d2fabddde382f3109c7b546d8dfab693909ff31
-
SHA512
44b774859fa80e8dd9d6e46e93af9b255c0bc517d61db4e25c2dfc28bc747e47ae37ba14c54be0525c9710ac622ed50b8699512cbb40d739aa8abc794934fb18
-
SSDEEP
12288:y0VA/nSRJEPDdfjDCN90oAfUwk7ZQIHTK1vVKvF:y0VAfceNjDM/772GK1vct
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\23bebf330f775a5ef583df8eff9e1379_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\23bebf330f775a5ef583df8eff9e1379_JaffaCakes118.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\23bebf330f775a5ef583df8eff9e1379_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\23bebf330f775a5ef583df8eff9e1379_JaffaCakes118.exe2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4280 -s 123⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4280 -ip 42801⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
1.1MB