Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 14:13

General

  • Target

    22a5f38c30b5f0efc09aa5c0790f1e1c_JaffaCakes118.exe

  • Size

    25KB

  • MD5

    22a5f38c30b5f0efc09aa5c0790f1e1c

  • SHA1

    f5090c0608ceca2cc4937873fe99d5b4f6936f38

  • SHA256

    26190d4e62e798e7251734298705c82de9971bcfbe7c66e2a17c96f913d8bebc

  • SHA512

    f7b4e3c0f711e5d0f0be4d2af1203aa956c290ee01f5737b5595fceff200f93ba01ae0c1bc886910748ca48a73fd5a5ccd4a9f71c158c37a96be9fc3babf1c52

  • SSDEEP

    768:aztHrpvTNA9qH1h9mS7ny3DAx57CCqYIh99XUbG:aztthA9s957nyy57CCpID9ES

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\22a5f38c30b5f0efc09aa5c0790f1e1c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\22a5f38c30b5f0efc09aa5c0790f1e1c_JaffaCakes118.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:840
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 840 -s 64
      2⤵
      • Program crash
      PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads