bdcb037ea9cc4516f90367a8ad11cf3b2d5db3bc8e519da3f07ad4ceca0bf0a4

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
11/07/2024, 08:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

385142d3a139df343e6037017446de1e_JaffaCakes118.exe
Size

392KB
MD5

385142d3a139df343e6037017446de1e
SHA1

c7921f731b26fa2384357cc786172c76dd49eb7c
SHA256

bdcb037ea9cc4516f90367a8ad11cf3b2d5db3bc8e519da3f07ad4ceca0bf0a4
SHA512

4adc0c9dd1c1aad74e72cd3ff3e1d045e367d6c8159cbafb8b7df1896c8e17b56e133707933b34946902bc098dc3dedb32651310b746d969067d1ae6ade950c7
SSDEEP

12288:ccgt8wbl6b7MP+Dd2Ld6q6b7MP+Dd2ZVWa:cHt8wbk7MP+h2Ld6L7MP+h2ZVf

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5044	372	WerFault.exe	82

Modifies registry class 3 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile"	385142d3a139df343e6037017446de1e_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	385142d3a139df343e6037017446de1e_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\	385142d3a139df343e6037017446de1e_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\385142d3a139df343e6037017446de1e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\385142d3a139df343e6037017446de1e_JaffaCakes118.exe"
1⤵
- Modifies registry class
PID:372
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 372 -s 472
  2⤵
  - Program crash
  PID:5044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 372 -ip 372
1⤵
PID:4112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/372-0-0x0000000000400000-0x0000000000477000-memory.dmp

Filesize
476KB

Download
memory/372-1-0x0000000000570000-0x00000000005A0000-memory.dmp

Filesize
192KB

Download
memory/372-2-0x0000000000550000-0x0000000000554000-memory.dmp

Filesize
16KB

Download
memory/372-26-0x0000000002390000-0x0000000002391000-memory.dmp

Filesize
4KB

Download
memory/372-32-0x00000000023F0000-0x00000000023F1000-memory.dmp

Filesize
4KB

Download
memory/372-31-0x00000000023C0000-0x00000000023C1000-memory.dmp

Filesize
4KB

Download
memory/372-30-0x00000000023D0000-0x00000000023D1000-memory.dmp

Filesize
4KB

Download
memory/372-29-0x00000000023A0000-0x00000000023A1000-memory.dmp

Filesize
4KB

Download
memory/372-28-0x00000000023B0000-0x00000000023B1000-memory.dmp

Filesize
4KB

Download
memory/372-27-0x0000000002380000-0x0000000002381000-memory.dmp

Filesize
4KB

Download
memory/372-25-0x0000000002360000-0x0000000002361000-memory.dmp

Filesize
4KB

Download
memory/372-23-0x0000000002340000-0x0000000002341000-memory.dmp

Filesize
4KB

Download
memory/372-24-0x0000000002370000-0x0000000002371000-memory.dmp

Filesize
4KB

Download
memory/372-22-0x0000000002350000-0x0000000002351000-memory.dmp

Filesize
4KB

Download
memory/372-21-0x0000000002320000-0x0000000002321000-memory.dmp

Filesize
4KB

Download
memory/372-20-0x0000000002330000-0x0000000002331000-memory.dmp

Filesize
4KB

Download
memory/372-19-0x0000000002300000-0x0000000002301000-memory.dmp

Filesize
4KB

Download
memory/372-18-0x0000000002310000-0x0000000002311000-memory.dmp

Filesize
4KB

Download
memory/372-17-0x00000000022E0000-0x00000000022E1000-memory.dmp

Filesize
4KB

Download
memory/372-16-0x00000000022F0000-0x00000000022F1000-memory.dmp

Filesize
4KB

Download
memory/372-15-0x00000000022C0000-0x00000000022C1000-memory.dmp

Filesize
4KB

Download
memory/372-14-0x00000000022D0000-0x00000000022D1000-memory.dmp

Filesize
4KB

Download
memory/372-37-0x0000000002420000-0x0000000002421000-memory.dmp

Filesize
4KB

Download
memory/372-53-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/372-52-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/372-51-0x0000000002540000-0x0000000002541000-memory.dmp

Filesize
4KB

Download
memory/372-50-0x0000000002510000-0x0000000002511000-memory.dmp

Filesize
4KB

Download
memory/372-49-0x00000000024F0000-0x00000000024F1000-memory.dmp

Filesize
4KB

Download
memory/372-48-0x0000000002500000-0x0000000002501000-memory.dmp

Filesize
4KB

Download
memory/372-47-0x00000000024D0000-0x00000000024D1000-memory.dmp

Filesize
4KB

Download
memory/372-46-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/372-45-0x00000000024B0000-0x00000000024B1000-memory.dmp

Filesize
4KB

Download
memory/372-44-0x00000000024C0000-0x00000000024C1000-memory.dmp

Filesize
4KB

Download
memory/372-43-0x0000000002490000-0x0000000002491000-memory.dmp

Filesize
4KB

Download
memory/372-42-0x00000000024A0000-0x00000000024A1000-memory.dmp

Filesize
4KB

Download
memory/372-41-0x0000000002470000-0x0000000002471000-memory.dmp

Filesize
4KB

Download
memory/372-40-0x0000000002480000-0x0000000002481000-memory.dmp

Filesize
4KB

Download
memory/372-39-0x0000000002440000-0x0000000002441000-memory.dmp

Filesize
4KB

Download
memory/372-38-0x0000000002450000-0x0000000002451000-memory.dmp

Filesize
4KB

Download
memory/372-36-0x0000000002430000-0x0000000002431000-memory.dmp

Filesize
4KB

Download
memory/372-35-0x0000000002400000-0x0000000002401000-memory.dmp

Filesize
4KB

Download
memory/372-34-0x0000000002410000-0x0000000002411000-memory.dmp

Filesize
4KB

Download
memory/372-33-0x00000000023E0000-0x00000000023E1000-memory.dmp

Filesize
4KB

Download
memory/372-13-0x0000000002190000-0x0000000002191000-memory.dmp

Filesize
4KB

Download
memory/372-12-0x00000000021A0000-0x00000000021A1000-memory.dmp

Filesize
4KB

Download
memory/372-11-0x0000000002170000-0x0000000002171000-memory.dmp

Filesize
4KB

Download
memory/372-10-0x0000000002180000-0x0000000002181000-memory.dmp

Filesize
4KB

Download
memory/372-9-0x0000000002150000-0x0000000002151000-memory.dmp

Filesize
4KB

Download
memory/372-8-0x0000000002160000-0x0000000002161000-memory.dmp

Filesize
4KB

Download
memory/372-7-0x0000000002110000-0x0000000002111000-memory.dmp

Filesize
4KB

Download
memory/372-6-0x0000000000520000-0x0000000000521000-memory.dmp

Filesize
4KB

Download
memory/372-5-0x0000000000510000-0x0000000000511000-memory.dmp

Filesize
4KB

Download
memory/372-4-0x0000000000560000-0x0000000000561000-memory.dmp

Filesize
4KB

Download
memory/372-3-0x0000000000540000-0x0000000000541000-memory.dmp

Filesize
4KB

Download
memory/372-54-0x0000000000400000-0x0000000000477000-memory.dmp

Filesize
476KB

Download
memory/372-55-0x0000000000570000-0x00000000005A0000-memory.dmp

Filesize
192KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads