Analysis

  • max time kernel
    41s
  • max time network
    49s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/07/2024, 23:43

General

  • Target

    26ac4e234771386a25002aed56ec0c83_JaffaCakes118.exe

  • Size

    43KB

  • MD5

    26ac4e234771386a25002aed56ec0c83

  • SHA1

    ba7b7dcde287db4c06bfe536b6bfaf44cec02fc4

  • SHA256

    79e04220ff249ac7a5bbd71a136dd45198bf44c603e5fd956dc9e79f0fe36412

  • SHA512

    0b1a8a3161cfb8b2b975b538545af137544a9c490079e002379bd9a076c058e055182289eb9fac8b64dd6904084b17cdb2625fcb3e7c3777eebadc070014fbdc

  • SSDEEP

    768:062JRSgLvEaJ0bwo6fii2489ZWdX7gcaKaAEqYRiZRIfu3zjFI7/JX6iq3KRe5jB:05ygDEre8rWdX7kfAEqYiRy7xqTR5jMK

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\26ac4e234771386a25002aed56ec0c83_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\26ac4e234771386a25002aed56ec0c83_JaffaCakes118.exe"
    1⤵
      PID:1456
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1456 -s 452
        2⤵
        • Program crash
        PID:4896
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1456 -ip 1456
      1⤵
        PID:656

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1456-0-0x0000000000420000-0x0000000000440000-memory.dmp

        Filesize

        128KB

      • memory/1456-1-0x0000000000420000-0x0000000000440000-memory.dmp

        Filesize

        128KB