Overview

overview

3

Static

static

3

32d0871bf5...18.exe

windows7-x64

3

32d0871bf5...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/07/2024, 01:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    32d0871bf544a8e3f491c833bd35b661_JaffaCakes118.exe

  • Size

    20KB

  • MD5

    32d0871bf544a8e3f491c833bd35b661

  • SHA1

    90b4c4a8bb2d536b1d18c6189c5a7e831163bcfb

  • SHA256

    a97df67784e34f840d8eed805edb90a9411f79b93c3b6c3b68f66bf4e5636922

  • SHA512

    5526684c53ca3d71009f3c6e7a6409bd8f9f605f505c7b5589e39797c8f370b8fd0a53b222b4d61ce15bb1fc813891f39576baa7c96c2defc234408941d358d0

  • SSDEEP

    384:l1fCsBojwlFZERLy5ZPg85jNZnOlKr+HmerfEoOjiY/R3C:nOWAyfTcPHmCfEo0Ry

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\32d0871bf544a8e3f491c833bd35b661_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\32d0871bf544a8e3f491c833bd35b661_JaffaCakes118.exe"
    1⤵
      PID:3228
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3228 -s 284
        2⤵
        • Program crash
        PID:4040
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3228 -ip 3228
      1⤵
        PID:2820

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3228-0-0x0000000000400000-0x0000000000407000-memory.dmp

              Filesize

              28KB

              Download

            • memory/3228-1-0x0000000000400000-0x0000000000407000-memory.dmp

              Filesize

              28KB

              Download