Overview

overview

3

Static

static

3

2d74f90eac...18.exe

windows7-x64

3

2d74f90eac...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    93s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/07/2024, 18:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2d74f90eacae22785376d2bf5c58074e_JaffaCakes118.exe

  • Size

    317KB

  • MD5

    2d74f90eacae22785376d2bf5c58074e

  • SHA1

    e82f8ede7c9e8887a76e5ea59aed2579f021d8f8

  • SHA256

    50b1f0480f539b920309c498df771ec938ebbd655d55764d68d6638655a58d97

  • SHA512

    b8dd99dc9a65c32eac72dc58cc48074616aced1739854c31b95c07d4f9ff0b97c0469a3a5c6bf5ddd62647fb8cb9537e41b5a89841bcec2583900ba9e4eebe3b

  • SSDEEP

    6144:lE8zqgKXsb4TvA0WdppEvOlOtA97dcn8DNSxhxFcYf8nv:9FKX3TOQaGK7du6NSxnaPv

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d74f90eacae22785376d2bf5c58074e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2d74f90eacae22785376d2bf5c58074e_JaffaCakes118.exe"
    1⤵
      PID:1832
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1832 -s 404
        2⤵
        • Program crash
        PID:2304
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1832 -s 408
        2⤵
        • Program crash
        PID:1516
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1832 -ip 1832
      1⤵
        PID:4280
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1832 -ip 1832
        1⤵
          PID:1040

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1832-0-0x0000000000400000-0x0000000000454000-memory.dmp

          Filesize

          336KB

          Download

        • memory/1832-1-0x0000000000400000-0x0000000000454000-memory.dmp

          Filesize

          336KB

          Download