602ff0299de5df6493117e4ee32297f064b4b11e29bf048faf5c64bf3c8ee274 | Triage

Analysis

max time kernel
94s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 18:49

Sharing

Report Analysis Logs

General

Target

42e885d70065d9357987e21a36a2d2ff_JaffaCakes118.exe
Size

33KB
MD5

42e885d70065d9357987e21a36a2d2ff
SHA1

ebc8530aad528b5d995c0e37d18d57e23b64a236
SHA256

602ff0299de5df6493117e4ee32297f064b4b11e29bf048faf5c64bf3c8ee274
SHA512

0fac3125cadba6d5c39cc0af44c8b6c114cda4c52f4427aae5655aba1e8b20c869eaade7f38e8f9c75fec5fbbe327b636317a8a7a6fea09085008d62b69e3eb5
SSDEEP

768:MAkoE3CtAALjyUf6ArgC/NSiGQggBZds2L3:Io/AALmUv/igjD

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2616	2428	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\42e885d70065d9357987e21a36a2d2ff_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\42e885d70065d9357987e21a36a2d2ff_JaffaCakes118.exe"
1⤵
PID:2428
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2428 -s 272
  2⤵
  - Program crash
  PID:2616

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2428 -ip 2428
1⤵
PID:4948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2428-0-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/2428-1-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download