Overview

overview

6

Static

static

3

313bbf593b...18.exe

windows7-x64

6

313bbf593b...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    93s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/07/2024, 17:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    313bbf593b166c5a50849e207309e4c1_JaffaCakes118.exe

  • Size

    168KB

  • MD5

    313bbf593b166c5a50849e207309e4c1

  • SHA1

    0168ac921d53fc5644f737256d993f66daba24a3

  • SHA256

    5b2b4e136aae55def3f3ae313da0e933d88cf7977aa7763d97a0b0ffecd1b6a3

  • SHA512

    a276a206c684457377bd4fe4ff2115c151cbb670b8c830feaa206c290632835b760c340b70784a8372937ee25a545fc53999d16c360047aa4af41c9cbcf9c260

  • SSDEEP

    3072:h3agdPFr3+Xj9U7cYwPIefuUML6iJdYmfAuYZ0++QZRr8W6:pagRxuXxUoYeIefIL6M1A+Qj

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\313bbf593b166c5a50849e207309e4c1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\313bbf593b166c5a50849e207309e4c1_JaffaCakes118.exe"
    1⤵
      PID:3016
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3016 -s 472
        2⤵
        • Program crash
        PID:2296
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3016 -ip 3016
      1⤵
        PID:872

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3016-0-0x0000000000400000-0x000000000042C000-memory.dmp

              Filesize

              176KB

              Download

            • memory/3016-1-0x0000000000400000-0x000000000042C000-memory.dmp

              Filesize

              176KB

              Download