Overview

overview

3

Static

static

3

3e91aa581d...18.exe

windows7-x64

3

3e91aa581d...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    92s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/07/2024, 19:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    3e91aa581d8284682add81d828bc5d59_JaffaCakes118.exe

  • Size

    80KB

  • MD5

    3e91aa581d8284682add81d828bc5d59

  • SHA1

    fe551dc12387aaa6928b82cb2775e7f59b7026b9

  • SHA256

    36c4489b4448ec451c084d19ae10f0f6eebe7f56b40b976881abab88d8bf53ea

  • SHA512

    e8f49a3a34a4924b3a7ec6e071609c1e74c1123f5582a4d987372e572a2b332046fa0ee4d855fb17468b2d349cda827d2409f567f03cb6bbb0e1d9b65fe356fb

  • SSDEEP

    1536:so15MzLpvuwjavf5UpLQCRvsm7SJt3A+tFn:F15MzlDa3lCRBS3AAR

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e91aa581d8284682add81d828bc5d59_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3e91aa581d8284682add81d828bc5d59_JaffaCakes118.exe"
    1⤵
      PID:756
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 756 -s 276
        2⤵
        • Program crash
        PID:2644
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 756 -ip 756
      1⤵
        PID:3180

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/756-0-0x0000000044440000-0x0000000044458000-memory.dmp

              Filesize

              96KB

              Download