Analysis

  • max time kernel
    94s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-07-2024 17:09

General

  • Target

    28f34ea0c0b41fa019d01aba8ac5c2d9_JaffaCakes118.exe

  • Size

    30KB

  • MD5

    28f34ea0c0b41fa019d01aba8ac5c2d9

  • SHA1

    887e46b225858e35c26bae8a1cc2ffef5dd1126b

  • SHA256

    902b71faf1489b34f2d762ccd5b9acc14d9a0f5bfc48eeb260c91380d7b134ff

  • SHA512

    46a75f567b3525ec84e9cc7d377a925057af1129c5c97ae6c76112d686eb5d87d58f4ed1d530180fef4c88baabe4927b3c1c11c0fd05d2ec3c9ae639b1c21a93

  • SSDEEP

    384:s/D1eaUvLvSoF/sH08CvII6HGLBxpuQjQyfkfqiDLhPMNJkrTHYlZ7wNaf:LaUv7SoFL8GxLB7cyfgqsOvkPHYvx

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\28f34ea0c0b41fa019d01aba8ac5c2d9_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\28f34ea0c0b41fa019d01aba8ac5c2d9_JaffaCakes118.exe"
    1⤵
      PID:2244
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2244 -s 264
        2⤵
        • Program crash
        PID:5052
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2244 -ip 2244
      1⤵
        PID:1556

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2244-0-0x0000000000100000-0x000000000010F000-memory.dmp

        Filesize

        60KB