Analysis
-
max time kernel
93s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
10-07-2024 03:49
General
-
Target
333141bb87cba2144619a1155cee84db_JaffaCakes118.exe
-
Size
114KB
-
MD5
333141bb87cba2144619a1155cee84db
-
SHA1
9c4af2934d3e398bdc1e6958f1c312d9380d6458
-
SHA256
2fc3cd4a6556692e3241491d06511ff99b19c5b3ece75464eed2df54e3bfa1a2
-
SHA512
98df93cecffbc970fe5c3bec8ed25a83ce6ef29b429fd9240f08de79485732d503ea7e128fd2bb76ae793159852af92fdc610beb99b87dc26409ed1b0a1d22cb
-
SSDEEP
1536:3oG0m7XX3F/l40hknMizdcTWB2O1qENMnwnRlBCL/m09sEtW:3oG0gX3F/BknMQKkRawRlgB5tW
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\333141bb87cba2144619a1155cee84db_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\333141bb87cba2144619a1155cee84db_JaffaCakes118.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\333141bb87cba2144619a1155cee84db_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\333141bb87cba2144619a1155cee84db_JaffaCakes118.exe"2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3980 -s 3643⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3980 -ip 39801⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
-
Filesize
172KB
-
Filesize
116KB
-
Filesize
116KB
-
Filesize
116KB
-
Filesize
116KB
-
Filesize
116KB
-
Filesize
116KB