Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/07/2024, 11:27

General

  • Target

    302ece536e6cca371ed202c8c63f3545_JaffaCakes118.exe

  • Size

    629KB

  • MD5

    302ece536e6cca371ed202c8c63f3545

  • SHA1

    f19215507d3cfa8ec6c9cc60d037846438f03c7a

  • SHA256

    30ad379f396f3228de4138bc907fc7bcafee21e4c38d62f84d3909b2fee0a3e0

  • SHA512

    1154d5a084076340b8abdf88d6d4ebfc69af99437d268583ff842e697fb1b0f94cf820d19b0836124fdb94785c2e01fe461f71b5929c782e20883bc36f875222

  • SSDEEP

    12288:dRnzcT7+pTsQ4FrSwhfMH485d+FaPFS9LX9IXLSSSTDfxmgORqNJBV1Ls2LMpB8a:P+7ETFWuyfMY85dA0FS9LabbSTvOMNJ4

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\302ece536e6cca371ed202c8c63f3545_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\302ece536e6cca371ed202c8c63f3545_JaffaCakes118.exe"
    1⤵
      PID:1088
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1088 -s 2340
        2⤵
        • Program crash
        PID:3948
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1088 -ip 1088
      1⤵
        PID:3676

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/1088-7-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-6-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-8-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-9-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-10-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-11-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-12-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-13-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-14-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-15-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-18-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-17-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-16-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-19-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-20-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-21-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-22-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-23-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-24-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-25-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-27-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-26-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-28-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-30-0x00000000060F0000-0x0000000006100000-memory.dmp

              Filesize

              64KB

            • memory/1088-31-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-33-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-32-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-29-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-34-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-35-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-36-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-37-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-42-0x00000000060F0000-0x0000000006130000-memory.dmp

              Filesize

              256KB

            • memory/1088-41-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-40-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-44-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-46-0x00000000060F0000-0x0000000006100000-memory.dmp

              Filesize

              64KB

            • memory/1088-45-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-43-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-39-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-38-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-47-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-48-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-49-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-50-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-51-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-52-0x00000000025D0000-0x00000000025E0000-memory.dmp

              Filesize

              64KB

            • memory/1088-54-0x0000000000400000-0x00000000004A1000-memory.dmp

              Filesize

              644KB

            • memory/1088-55-0x0000000000400000-0x00000000004A1000-memory.dmp

              Filesize

              644KB

            • memory/1088-57-0x0000000000400000-0x00000000004A1000-memory.dmp

              Filesize

              644KB

            • memory/1088-56-0x0000000000400000-0x00000000004A1000-memory.dmp

              Filesize

              644KB

            • memory/1088-53-0x0000000000409000-0x000000000040A000-memory.dmp

              Filesize

              4KB

            • memory/1088-58-0x0000000000400000-0x00000000004A1000-memory.dmp

              Filesize

              644KB