Analysis

  • max time kernel
    138s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/07/2024, 14:43

General

  • Target

    5c61b7f113068e7cc9c9c6d1746ba3f5_JaffaCakes118.exe

  • Size

    138KB

  • MD5

    5c61b7f113068e7cc9c9c6d1746ba3f5

  • SHA1

    82a6c9ab78d82395427ff7f13cb01257308a1b42

  • SHA256

    4d3bcb331915c89bbf8e0ca91a7f2d5befed1317b9cec818bc1812ab42fd7472

  • SHA512

    bfe6ec35f6df7e445f240d2cbc27eb637109133c92d60396ff2fee1cb83ff1f1ab76bab3a5ada039c12d343972850d61ce69d1a1223ca73ded09e97ce48ad1d7

  • SSDEEP

    1536:NykgLplBS4BH73S7TcbJxbyC3iF440qEJ9tpz58Xh5DL:N1gLXBH72TcbPuSaL0l7tN5Wh5

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5c61b7f113068e7cc9c9c6d1746ba3f5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5c61b7f113068e7cc9c9c6d1746ba3f5_JaffaCakes118.exe"
    1⤵
      PID:2228
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2228 -s 376
        2⤵
        • Program crash
        PID:4716
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2228 -ip 2228
      1⤵
        PID:1936

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2228-0-0x0000000001000000-0x0000000001025000-memory.dmp

        Filesize

        148KB

      • memory/2228-1-0x0000000001014000-0x0000000001021000-memory.dmp

        Filesize

        52KB

      • memory/2228-2-0x0000000001000000-0x0000000001025000-memory.dmp

        Filesize

        148KB