Analysis
-
max time kernel
94s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
11/07/2024, 17:06
General
-
Target
3a023b3d1a98a5e7516c25fefb6fd99d_JaffaCakes118.exe
-
Size
34KB
-
MD5
3a023b3d1a98a5e7516c25fefb6fd99d
-
SHA1
004fa03337063d68ebc08d4b8a02d8bc7a80508f
-
SHA256
5bb45208742e5b9741e1b35656597af73254a5014797c889e8652d23c178ff9c
-
SHA512
bcde5958c09ff42cfa34b6dd7d167c3f44fb48d03d36f74583515cfe42d168ff38e3673c95200e0979abd417cfd22183f245fb2eeecc1ebdff7ed5345f8fa6c1
-
SSDEEP
384:upvlDIWkJQAQioBgS/c5rLPDK047yHDPUp2K1F5QawnAQVq+EF:unkbli/cPbGWDs1FmaLQc+EF
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a023b3d1a98a5e7516c25fefb6fd99d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3a023b3d1a98a5e7516c25fefb6fd99d_JaffaCakes118.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3a023b3d1a98a5e7516c25fefb6fd99d_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\3a023b3d1a98a5e7516c25fefb6fd99d_JaffaCakes118.exe2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4044 -s 4563⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4044 -ip 40441⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB