Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-07-2024 10:19

General

  • Target

    3451b6279e3bf9045aa472a258c88ff6_JaffaCakes118.exe

  • Size

    1.3MB

  • MD5

    3451b6279e3bf9045aa472a258c88ff6

  • SHA1

    053e1cd6f4d460a4c9da233117ae96f8ba5b7d91

  • SHA256

    dd78f452a986dace4bfe31ec5e0bd80a5614a324ba5b8ccd88828ff4554b2e0e

  • SHA512

    7f529d700daf1b9eb8e16179c06be5ba97c9b85d868ed07e229081b809914d09b37f608d8935e3824c40bcda1684286ba3fd720141a798a7b96aaace0c1c0532

  • SSDEEP

    24576:qWnk9cpCp2F12V/rVIEqbMLp77UKymQxna2Pa0OaT15xCv:qhdEF18/4bMBJFmxPPOM8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3451b6279e3bf9045aa472a258c88ff6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3451b6279e3bf9045aa472a258c88ff6_JaffaCakes118.exe"
    1⤵
      PID:3896
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3896 -s 272
        2⤵
        • Program crash
        PID:3460
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3896 -s 304
        2⤵
        • Program crash
        PID:1856
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3896 -ip 3896
      1⤵
        PID:212
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3896 -ip 3896
        1⤵
          PID:1752

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3896-0-0x0000000010000000-0x000000001000D000-memory.dmp

          Filesize

          52KB

        • memory/3896-1-0x0000000010000000-0x000000001000D000-memory.dmp

          Filesize

          52KB