3a51f427db6a25aa5a944fe39e085f86031d1210f4d841594039cf3d04b2ba79 | Triage

Analysis

max time kernel
94s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2024, 12:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

49c1ba59f44495558c17ea50fd3ea576_JaffaCakes118.exe
Size

36KB
MD5

49c1ba59f44495558c17ea50fd3ea576
SHA1

55fa5e6941ab895a9e1db7969080c65e6583a949
SHA256

3a51f427db6a25aa5a944fe39e085f86031d1210f4d841594039cf3d04b2ba79
SHA512

63f62846292057edb1d6b838d41d1ba89c34d51108dbee101edf3623261906369e64cea7d5f7088b5ce2c794c2172bb43663f9fd3c97ec0d0a8514b24754a84f
SSDEEP

768:4GJCJE9CUabnY3ksLD0w+Tm1ePIrtV3rfFW:4GnCUaE9R9W

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2016	2824	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\49c1ba59f44495558c17ea50fd3ea576_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\49c1ba59f44495558c17ea50fd3ea576_JaffaCakes118.exe"
1⤵
PID:2824
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2824 -s 412
  2⤵
  - Program crash
  PID:2016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2824 -ip 2824
1⤵
PID:2892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2824-0-0x0000000000400000-0x0000000000408640-memory.dmp

Filesize
33KB

Download
memory/2824-1-0x0000000000400000-0x0000000000408640-memory.dmp

Filesize
33KB

Download