2ffffcde9425f610219e1a84dd81d7cc04ddcb8f3f93d1643623eed3c31f5187

Analysis

max time kernel
140s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
12/07/2024, 19:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3e91da65024ce74b1b6c13717e805b6a_JaffaCakes118.exe
Size

477KB
MD5

3e91da65024ce74b1b6c13717e805b6a
SHA1

dcadbcc6890fc0e9ea1967021774c7c5c6e6cdb6
SHA256

2ffffcde9425f610219e1a84dd81d7cc04ddcb8f3f93d1643623eed3c31f5187
SHA512

4115b141158790f6c039a717c3f9035706c37bfc7097b7ae7b5e26d76221f9540bad44fb87a662d6d7a9b35aeabfac77f40df260d40ce9cd56372fdf8acf1bdd
SSDEEP

12288:ZDSZu5XnD95tW8tP6qQkpRFcEmFzwJbm0ImYg/xDR+N9:xN3D95JfQkbetFM4mYgJDq9

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1888	2956	WerFault.exe	30

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2956	3e91da65024ce74b1b6c13717e805b6a_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2956 wrote to memory of 1888	2956	3e91da65024ce74b1b6c13717e805b6a_JaffaCakes118.exe	31
PID 2956 wrote to memory of 1888	2956	3e91da65024ce74b1b6c13717e805b6a_JaffaCakes118.exe	31
PID 2956 wrote to memory of 1888	2956	3e91da65024ce74b1b6c13717e805b6a_JaffaCakes118.exe	31
PID 2956 wrote to memory of 1888	2956	3e91da65024ce74b1b6c13717e805b6a_JaffaCakes118.exe	31

C:\Users\Admin\AppData\Local\Temp\3e91da65024ce74b1b6c13717e805b6a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3e91da65024ce74b1b6c13717e805b6a_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2956
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2956 -s 360
  2⤵
  - Program crash
  PID:1888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2956-0-0x0000000000400000-0x0000000000613000-memory.dmp

Filesize
2.1MB

Download
memory/2956-1-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-3-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-4-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-10-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-11-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-9-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-8-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-7-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-6-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-5-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-2-0x0000000000400000-0x0000000000613000-memory.dmp

Filesize
2.1MB

Download
memory/2956-12-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-18-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-25-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-26-0x00000000005A9000-0x00000000005FE000-memory.dmp

Filesize
340KB

Download
memory/2956-24-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-23-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-22-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-21-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-20-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-19-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-17-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-16-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-15-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-14-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-13-0x0000000000320000-0x000000000036C000-memory.dmp

Filesize
304KB

Download
memory/2956-28-0x0000000000400000-0x0000000000613000-memory.dmp

Filesize
2.1MB

Download