a11fdb144a24b2be8e6892a2f84dc90a0e33bb040f00f1bc31892ce621a65312

Analysis

max time kernel
93s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 12:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

304ad5d91acb84dbcc6c6473f3d39bd9_JaffaCakes118.exe
Size

241KB
MD5

304ad5d91acb84dbcc6c6473f3d39bd9
SHA1

90c16866ea4131433693deca4d8c8d452dde1861
SHA256

a11fdb144a24b2be8e6892a2f84dc90a0e33bb040f00f1bc31892ce621a65312
SHA512

200d10b2b4a58fd1d2f5dd916567097f8bc36b213480fcc1276ff5bb860dba43220ab04b6e9b6e093887d8a93b34632638a8f9c5fb364076f6e3a1c29a4f4640
SSDEEP

6144:F+qB2naFPH+ns0gBswvP6bQ7yMP+DE827N0GV/5:F+qBlFPH+nh8d6b7MP+Dd2J3

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File created	C:\Windows\inf\ram32xp.dll	304ad5d91acb84dbcc6c6473f3d39bd9_JaffaCakes118.exe
File created	C:\Windows\inf\ram65xp.dll	304ad5d91acb84dbcc6c6473f3d39bd9_JaffaCakes118.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3772	3384	WerFault.exe	81

Modifies registry class 3 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\	304ad5d91acb84dbcc6c6473f3d39bd9_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile"	304ad5d91acb84dbcc6c6473f3d39bd9_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	304ad5d91acb84dbcc6c6473f3d39bd9_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\304ad5d91acb84dbcc6c6473f3d39bd9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\304ad5d91acb84dbcc6c6473f3d39bd9_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
- Modifies registry class
PID:3384
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3384 -s 736
  2⤵
  - Program crash
  PID:3772

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3384 -ip 3384
1⤵
PID:4160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3384-0-0x0000000000400000-0x000000000047A000-memory.dmp

Filesize
488KB

Download
memory/3384-1-0x0000000000720000-0x0000000000750000-memory.dmp

Filesize
192KB

Download
memory/3384-2-0x0000000000710000-0x0000000000712000-memory.dmp

Filesize
8KB

Download
memory/3384-5-0x0000000002380000-0x0000000002381000-memory.dmp

Filesize
4KB

Download
memory/3384-6-0x0000000002370000-0x0000000002371000-memory.dmp

Filesize
4KB

Download
memory/3384-15-0x00000000022D0000-0x00000000022D1000-memory.dmp

Filesize
4KB

Download
memory/3384-14-0x00000000022E0000-0x00000000022E1000-memory.dmp

Filesize
4KB

Download
memory/3384-13-0x0000000000790000-0x0000000000791000-memory.dmp

Filesize
4KB

Download
memory/3384-12-0x00000000007B0000-0x00000000007B1000-memory.dmp

Filesize
4KB

Download
memory/3384-11-0x00000000007C0000-0x00000000007C1000-memory.dmp

Filesize
4KB

Download
memory/3384-10-0x0000000002280000-0x0000000002281000-memory.dmp

Filesize
4KB

Download
memory/3384-9-0x0000000002390000-0x0000000002391000-memory.dmp

Filesize
4KB

Download
memory/3384-8-0x00000000023A0000-0x00000000023A1000-memory.dmp

Filesize
4KB

Download
memory/3384-7-0x00000000023D0000-0x00000000023D1000-memory.dmp

Filesize
4KB

Download
memory/3384-4-0x0000000000700000-0x0000000000707000-memory.dmp

Filesize
28KB

Download
memory/3384-16-0x0000000000400000-0x000000000047A000-memory.dmp

Filesize
488KB

Download
memory/3384-17-0x0000000000720000-0x0000000000750000-memory.dmp

Filesize
192KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads