1bfa8843820872ebabfdad89c37cfde890d77d82309b8d055cf3a5aa3d5e8c04 | Triage

Analysis

max time kernel
124s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 10:59

Sharing

Report Analysis Logs

General

Target

3019f6b6b28258b3113cbc3e51a0ff5e_JaffaCakes118.exe
Size

42KB
MD5

3019f6b6b28258b3113cbc3e51a0ff5e
SHA1

8ff6864fe887c4bd98b0fd40ae96217c07e47d2e
SHA256

1bfa8843820872ebabfdad89c37cfde890d77d82309b8d055cf3a5aa3d5e8c04
SHA512

4daa50bac67f33ea12acd77d4e7b652c0bb0343e20035ba18d786f89c7029f04b7d18318979b3ff91419e2aad9d794d1d8999ca1d84d4061beff58b133021d2c
SSDEEP

768:x1NQ2vLaWplyGPxXYrb43yTxAyLoouJK:xItWVxosOaJK

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3868	1524	WerFault.exe	88

C:\Users\Admin\AppData\Local\Temp\3019f6b6b28258b3113cbc3e51a0ff5e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3019f6b6b28258b3113cbc3e51a0ff5e_JaffaCakes118.exe"
1⤵
PID:1524
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1524 -s 264
  2⤵
  - Program crash
  PID:3868

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1524 -ip 1524
1⤵
PID:224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4432,i,18341222626402534844,12352985901844242237,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
1⤵
PID:3060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1524-0-0x0000000000200000-0x0000000000211000-memory.dmp

Filesize
68KB

Download