ce95140c2d45271886013414a8d022e36e704f3fccd09fbc02fbf063eceb8b1c | Triage

Analysis

max time kernel
97s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13-07-2024 18:46

Sharing

Report Analysis Logs

General

Target

42e67b87c5ba7479f3c4634dae2faeea_JaffaCakes118.exe
Size

64KB
MD5

42e67b87c5ba7479f3c4634dae2faeea
SHA1

300abe90fba55cea39b76fe5329e0a2887f49434
SHA256

ce95140c2d45271886013414a8d022e36e704f3fccd09fbc02fbf063eceb8b1c
SHA512

ae10ee24a30a25981390e95de1cdfca921912e59c6d5f8909be14562c972dedf9b6cc7091ab788fba29c515f136a65d1e39cf9d2baa93610bc69f2094e747b60
SSDEEP

1536:IH6Tlf58U8texYXkHsKMSjfn4RGiw3kW4+l:I6TVWexYXu3FT

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2724	4272	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\42e67b87c5ba7479f3c4634dae2faeea_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\42e67b87c5ba7479f3c4634dae2faeea_JaffaCakes118.exe"
1⤵
PID:4272
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4272 -s 220
  2⤵
  - Program crash
  PID:2724

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4272 -ip 4272
1⤵
PID:468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4272-0-0x0000000000870000-0x0000000000898000-memory.dmp

Filesize
160KB

Download
memory/4272-1-0x0000000000870000-0x0000000000898000-memory.dmp

Filesize
160KB

Download