Overview

overview

3

Static

static

3

242f6949fb...18.exe

windows7-x64

1

242f6949fb...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    93s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/07/2024, 01:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    242f6949fb6e99102626d49b240e71ef_JaffaCakes118.exe

  • Size

    275KB

  • MD5

    242f6949fb6e99102626d49b240e71ef

  • SHA1

    9907395a711594cc853ae62137cd5b2847d557e8

  • SHA256

    cc19fb6a19b13d49c8caf607b6086abf28e6ba114e6c2d5a6a9c8aeff415ebdb

  • SHA512

    baa74b028e2dce5682cedc86d77329362fbdb2f9ec34d65ce427ec2247426a12cc0dd768cad9dd8f04d66ff6b9b152a1845c7f49695bf1f5b4bebf055059d5ec

  • SSDEEP

    6144:/xrEmcTGAGcLb664OSWKwvP6bQ7yMP+DE8276n2:+sYX/4gr6b7MP+Dd2Gn2

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\242f6949fb6e99102626d49b240e71ef_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\242f6949fb6e99102626d49b240e71ef_JaffaCakes118.exe"
    1⤵
      PID:2848
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2848 -s 216
        2⤵
        • Program crash
        PID:1584
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2848 -ip 2848
      1⤵
        PID:1492

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2848-0-0x0000000000400000-0x000000000051A000-memory.dmp

        Filesize

        1.1MB

        Download