Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15/07/2024, 21:26
General
-
Target
4b78f500475bb45929cffcccf3d5df3a_JaffaCakes118.exe
-
Size
572KB
-
MD5
4b78f500475bb45929cffcccf3d5df3a
-
SHA1
c63bdd66dcb5c47b5ddeb71e70244781066b557b
-
SHA256
ddd612dd81dd9129393c8e0b9ccc21f36964af4b7da50f2bc236f0f748057b64
-
SHA512
887ea9750ac1a2e35d4b8362d28b05138b4f1eaa0343183ef789a5ef56394b2b6fe457788bde4925bf90bfeff026fbbceecf5205c9d887a607b23dea1365f1a8
-
SSDEEP
12288:MZRz7Vn0m6S2dJqiqp7ifgQujVu8mRHKsqaygewZCuf:U9+m6SyANifgQG4qSvbZCi
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 2 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b78f500475bb45929cffcccf3d5df3a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4b78f500475bb45929cffcccf3d5df3a_JaffaCakes118.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4b78f500475bb45929cffcccf3d5df3a_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\4b78f500475bb45929cffcccf3d5df3a_JaffaCakes118.exe2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4528 -s 3443⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4528 -s 3483⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4528 -ip 45281⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 4528 -ip 45281⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
472KB
-
Filesize
148KB
-
Filesize
148KB
-
Filesize
148KB