Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/07/2024, 03:51

General

  • Target

    3332e891c535dce534dfb9c344ac6baa_JaffaCakes118.exe

  • Size

    40KB

  • MD5

    3332e891c535dce534dfb9c344ac6baa

  • SHA1

    0219acf315cbe322a75e9c6c4c1a02ca61508798

  • SHA256

    c314b2e8988b1f82beb5f414822ed266f412d7db3871406ba448bb9ec20f135e

  • SHA512

    de56a75cce7e17808383222397cac7a0cbc1c230f7dfe254db2abcfd7dded8904c520630244433f5a6ad857c1a1741df43f7f76a364a051a26c60bd9e38f4f7e

  • SSDEEP

    48:iJ7z4fumzsb3qhcv7sNV9CqDxUHICK4yNBWFV4odyf8yraZ04mdYZmv9:npz5fD6HRyNBehPyr204C

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3332e891c535dce534dfb9c344ac6baa_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3332e891c535dce534dfb9c344ac6baa_JaffaCakes118.exe"
    1⤵
      PID:1628
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1628 -s 220
        2⤵
        • Program crash
        PID:2164
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1628 -s 224
        2⤵
        • Program crash
        PID:3156
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1628 -ip 1628
      1⤵
        PID:2156
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1628 -ip 1628
        1⤵
          PID:3900

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1628-0-0x0000000000400000-0x0000000000422000-memory.dmp

          Filesize

          136KB