Overview

overview

3

Static

static

3

404b537304...18.exe

windows7-x64

3

404b537304...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/07/2024, 04:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    404b5373045080ff460e7d8f2868c0de_JaffaCakes118.exe

  • Size

    67KB

  • MD5

    404b5373045080ff460e7d8f2868c0de

  • SHA1

    33cd11213ad078bb07c1e313e484271ca0573284

  • SHA256

    f39fc326f44c105b3058199fb8730c300b060f0dd3770c79d2ce51365d20c8d1

  • SHA512

    c7e73e6267ee40a9434af0d600670fffc9e68c9aae045563b7c6b8d7a88c0516516670aa9c404318fcd135e21d830685adbf2c7c18696cfdad0c1583af25cf33

  • SSDEEP

    1536:xFGQjNsLP13pH0XqdpC0ozlqE1vsKZK3z5v1BqntM+3:x8ui7z06dpC0dE1tMD5tonf

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\404b5373045080ff460e7d8f2868c0de_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\404b5373045080ff460e7d8f2868c0de_JaffaCakes118.exe"
    1⤵
      PID:2932
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2932 -s 220
        2⤵
        • Program crash
        PID:2152
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2932 -ip 2932
      1⤵
        PID:3964

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2932-0-0x0000000000770000-0x0000000000799000-memory.dmp

        Filesize

        164KB

        Download

      • memory/2932-1-0x0000000000770000-0x0000000000799000-memory.dmp

        Filesize

        164KB

        Download