Overview

overview

10

Static

static

3

26465078ce...18.exe

windows7-x64

10

26465078ce...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    93s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/07/2024, 21:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    26465078ced2d4fdd387b6c1ce19ed5f_JaffaCakes118.exe

  • Size

    456KB

  • MD5

    26465078ced2d4fdd387b6c1ce19ed5f

  • SHA1

    81bcff269eaa78f4fb0def16634b8553d1f69445

  • SHA256

    01147e290481ab11a212b999aedabdbf2bee711abaf0226f61ebb711a827fe4e

  • SHA512

    c974af2a8ceabadcb26dc72edb183efd7672f896e501a8a1f9a755b7df6bc802b48cdfa63ae921868c095507bec56a1db4f6322c2276995adfe270c40f3d2ba0

  • SSDEEP

    6144:dLQBFWKMRIMzrAtet3yGueUdy3tvn+Djb/B6ziRt1eAAgWncdzGQ4y34J1N:dLKRMRduI3ieUYvn+PbkW4C4Qh

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\26465078ced2d4fdd387b6c1ce19ed5f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\26465078ced2d4fdd387b6c1ce19ed5f_JaffaCakes118.exe"
    1⤵
      PID:3060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3060 -s 552
        2⤵
        • Program crash
        PID:2476
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3060 -ip 3060
      1⤵
        PID:3128

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3060-0-0x00000000001C0000-0x00000000001C2000-memory.dmp

              Filesize

              8KB

              Download

            • memory/3060-1-0x0000000000410000-0x00000000004D8000-memory.dmp

              Filesize

              800KB

              Download