Overview

overview

7

Static

static

3

2f272e5f58...18.exe

windows7-x64

7

2f272e5f58...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    125s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/07/2024, 05:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2f272e5f58865b3ee5cc3365ddd63f3d_JaffaCakes118.exe

  • Size

    312KB

  • MD5

    2f272e5f58865b3ee5cc3365ddd63f3d

  • SHA1

    bfb030b91b4c912018df8e5923d56c9ae0f7804b

  • SHA256

    d7857612a8d035b159bd24eaa5e671908a3b88e326057428c95ccba9f3d22008

  • SHA512

    ad8b828f1ef21af44c7f9a1ff62ea2ba038aca20ed6942994fac4563fa3e7aaf5aeb76dcb9a66091ee17e5135406d7f65a7f74cce93306f584d7c981bda0867b

  • SSDEEP

    6144:s3iprLfWgs/Bwh+xCZz/er1PVnqz+EchIQ8CsTsus96AvWsl:s3ipwBwT5G5PVq7muTsus9z+

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2f272e5f58865b3ee5cc3365ddd63f3d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2f272e5f58865b3ee5cc3365ddd63f3d_JaffaCakes118.exe"
    1⤵
      PID:3468
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3468 -s 600
        2⤵
        • Program crash
        PID:468
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 3468 -ip 3468
      1⤵
        PID:4428
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4088,i,8550138573348074061,7308779696487990535,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:8
        1⤵
          PID:4832

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/3468-0-0x0000000000D60000-0x0000000000D61000-memory.dmp

                Filesize

                4KB

                Download

              • memory/3468-1-0x0000000001000000-0x00000000010B7000-memory.dmp

                Filesize

                732KB

                Download