aa3c419249a1b6c122a29d156980c0b11f2af7eb78e25c1a1c2a2c5157bff934 | Triage

Analysis

max time kernel
93s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08-07-2024 03:53

Sharing

Report Analysis Logs

General

Target

2ae32c4dcd9902c3a4ee0a94b0acd280_JaffaCakes118.exe
Size

52KB
MD5

2ae32c4dcd9902c3a4ee0a94b0acd280
SHA1

3908b5de08e21ccb97ccb7f18e0e6298f81e3990
SHA256

aa3c419249a1b6c122a29d156980c0b11f2af7eb78e25c1a1c2a2c5157bff934
SHA512

1407c8815c6f55e7e9c1bac8ed16dc8c1037c41288816c8c1a4e8a360382287e82f4875a7c80ca5b36169d84339d5d420f0f497af4fb3e8de3d0fa05891d1e11
SSDEEP

768:FlQ4hlpWHLMSgDu7gkuLn9YvYioRo/Z7o:fLhbjcgZDfo/Vo

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4636	1244	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2ae32c4dcd9902c3a4ee0a94b0acd280_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2ae32c4dcd9902c3a4ee0a94b0acd280_JaffaCakes118.exe"
1⤵
PID:1244
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1244 -s 252
  2⤵
  - Program crash
  PID:4636

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1244 -ip 1244
1⤵
PID:748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1244-0-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/1244-1-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download