Analysis

  • max time kernel
    91s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-07-2024 01:40

General

  • Target

    32d2923fcb7bb069c6d3a999692b8e76_JaffaCakes118.exe

  • Size

    457KB

  • MD5

    32d2923fcb7bb069c6d3a999692b8e76

  • SHA1

    e12ae18d9ebcf5e16ec66fdf3297d120435d2152

  • SHA256

    c81f2d3d44f1568d4ccb4824c10d7e34425c985d00b07c5c743e54ff8ae6bacd

  • SHA512

    b402f8013e33a46d644cf1f8bb8c021defdbaf018d64448d70a3466c9839a5cd040dc88e7e93a8a0f5baf5b6d421c01d3441078df3d6128e7276d95bb01ff01b

  • SSDEEP

    6144:EAymX7mtdymX7PT2qKQOAFZ+hHh79u5fJx9AHoJw4/5:EAWd0q4yWm5xqQ/

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\32d2923fcb7bb069c6d3a999692b8e76_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\32d2923fcb7bb069c6d3a999692b8e76_JaffaCakes118.exe"
    1⤵
      PID:1940
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1940 -s 836
        2⤵
        • Program crash
        PID:3460
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1940 -ip 1940
      1⤵
        PID:3476

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1940-0-0x0000000074EBE000-0x0000000074EBF000-memory.dmp

        Filesize

        4KB

      • memory/1940-1-0x0000000000300000-0x0000000000378000-memory.dmp

        Filesize

        480KB

      • memory/1940-2-0x00000000052A0000-0x0000000005844000-memory.dmp

        Filesize

        5.6MB

      • memory/1940-3-0x0000000004D90000-0x0000000004E22000-memory.dmp

        Filesize

        584KB