Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/07/2024, 18:33

General

  • Target

    35e58946e830fd5edb5b3d41b4ae5e92_JaffaCakes118.exe

  • Size

    582KB

  • MD5

    35e58946e830fd5edb5b3d41b4ae5e92

  • SHA1

    df4b2c688e1520687f6a6a76a320296f8d144f2d

  • SHA256

    f78beb5c2ada4f21aef89d3d2ebdc5b99903fff5d601e029265d53b3902c98eb

  • SHA512

    c4fa8cfb0f3feb2d673966d20e031cf971062df4a38f8540c5d6824f94094a2a4bb95d9125890ac6e7f665219754c81ff1ace8c31a6b6ad54a1be7cda40e577b

  • SSDEEP

    12288:WJvlICqUg3YiXi7y7XO/J6FG74oqMcBF3Z4mxx+2zQQZjtmvie:W5lKUqZDXO/h74jpBQmX9zLZJmvie

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\35e58946e830fd5edb5b3d41b4ae5e92_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\35e58946e830fd5edb5b3d41b4ae5e92_JaffaCakes118.exe"
    1⤵
      PID:468
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 468 -s 444
        2⤵
        • Program crash
        PID:388
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 468 -ip 468
      1⤵
        PID:5024

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/468-0-0x0000000000400000-0x00000000005F6000-memory.dmp

              Filesize

              2.0MB

            • memory/468-1-0x00000000023A0000-0x00000000023F4000-memory.dmp

              Filesize

              336KB

            • memory/468-29-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-32-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-66-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-59-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-65-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-64-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-63-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-62-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-61-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-60-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-58-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-57-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-56-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-55-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-54-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-53-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-52-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-51-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-50-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-49-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-48-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-47-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-46-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-45-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-44-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-43-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-42-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-41-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-40-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-39-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-38-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-37-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-36-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-35-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-34-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-33-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-31-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-30-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-13-0x0000000003580000-0x0000000003581000-memory.dmp

              Filesize

              4KB

            • memory/468-12-0x0000000003580000-0x0000000003581000-memory.dmp

              Filesize

              4KB

            • memory/468-11-0x0000000003580000-0x0000000003581000-memory.dmp

              Filesize

              4KB

            • memory/468-10-0x00000000025B0000-0x00000000025B1000-memory.dmp

              Filesize

              4KB

            • memory/468-9-0x0000000002620000-0x0000000002621000-memory.dmp

              Filesize

              4KB

            • memory/468-8-0x00000000025F0000-0x00000000025F1000-memory.dmp

              Filesize

              4KB

            • memory/468-7-0x0000000002600000-0x0000000002601000-memory.dmp

              Filesize

              4KB

            • memory/468-6-0x0000000002590000-0x0000000002591000-memory.dmp

              Filesize

              4KB

            • memory/468-5-0x00000000025A0000-0x00000000025A1000-memory.dmp

              Filesize

              4KB

            • memory/468-4-0x0000000002610000-0x0000000002611000-memory.dmp

              Filesize

              4KB

            • memory/468-3-0x00000000025C0000-0x00000000025C1000-memory.dmp

              Filesize

              4KB

            • memory/468-2-0x00000000025E0000-0x00000000025E1000-memory.dmp

              Filesize

              4KB

            • memory/468-28-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-27-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-26-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-25-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-24-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-23-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-22-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-21-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-20-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-19-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-18-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-17-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-16-0x0000000003570000-0x0000000003571000-memory.dmp

              Filesize

              4KB

            • memory/468-15-0x0000000003580000-0x0000000003581000-memory.dmp

              Filesize

              4KB

            • memory/468-14-0x0000000003580000-0x0000000003581000-memory.dmp

              Filesize

              4KB

            • memory/468-68-0x0000000000400000-0x00000000005F6000-memory.dmp

              Filesize

              2.0MB

            • memory/468-69-0x00000000023A0000-0x00000000023F4000-memory.dmp

              Filesize

              336KB