Overview

overview

3

Static

static

3

2668709345...18.exe

windows7-x64

3

2668709345...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/07/2024, 22:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    266870934544f7c74697d2b6e25f92d5_JaffaCakes118.exe

  • Size

    131KB

  • MD5

    266870934544f7c74697d2b6e25f92d5

  • SHA1

    6877807456e28af6ef237c1839ea9b8e054d3d8c

  • SHA256

    ff497e3232c890cd0ff3e05899b6b83a12c385a6fd58fe86e7c0fe8097f7be3a

  • SHA512

    1df994f628277d6201bb9a3d3b97e2e9b8526fbd00674760b8aba102e2f2ac291cad6ed7518bcc3b43816f0fc5261955a2376cbf222553301c7249370b255b3c

  • SSDEEP

    3072:8kVD3BSqao9c3HwsanTdgyOxsP+f+jZ7g+mY92PP1s8:zSqjc3HsTaxoqWZ7VQPP1s8

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\266870934544f7c74697d2b6e25f92d5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\266870934544f7c74697d2b6e25f92d5_JaffaCakes118.exe"
    1⤵
      PID:2484
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2484 -s 280
        2⤵
        • Program crash
        PID:5108
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2484 -s 288
        2⤵
        • Program crash
        PID:4420
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2484 -ip 2484
      1⤵
        PID:3944
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2484 -ip 2484
        1⤵
          PID:396

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/2484-0-0x0000000000400000-0x000000000042F000-memory.dmp

                Filesize

                188KB

                Download

              • memory/2484-1-0x0000000000400000-0x000000000042F000-memory.dmp

                Filesize

                188KB

                Download