Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    18-07-2024 04:58

General

  • Target

    5639dd83c11da3c211dc60f833d97e23_JaffaCakes118.exe

  • Size

    71KB

  • MD5

    5639dd83c11da3c211dc60f833d97e23

  • SHA1

    ad395c42ad79e1194ee740393ddfcfeb43556d6c

  • SHA256

    09155a0d3b41f3977cfd7dcca0a4613d20c3b97e831382cef00599b5a40ed221

  • SHA512

    21cb036780b0e703f6ae0687ba38874eabd29e86f749b58d7753eb26e0ee5762863a75b980baa4a6fe5bca61ea52a5b6d36a0068558fa010271b60741002cac2

  • SSDEEP

    1536:2NT/jhTJryh99oZMxZvUAGm8TA24VFHiHSLWHCbJIJI40uZ0H:qjhTJru9uqlUDme8WiiJ5RGH

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5639dd83c11da3c211dc60f833d97e23_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5639dd83c11da3c211dc60f833d97e23_JaffaCakes118.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2976
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 36
      2⤵
      • Program crash
      PID:2200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2976-0-0x0000000000400000-0x000000000040D000-memory.dmp

    Filesize

    52KB