Analysis

  • max time kernel
    135s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-07-2024 15:11

General

  • Target

    5c7b5569a9e47cafebb8be4d0357fa89_JaffaCakes118.exe

  • Size

    621KB

  • MD5

    5c7b5569a9e47cafebb8be4d0357fa89

  • SHA1

    849f5a7d93c039694b95c7091bffa3375560a3f1

  • SHA256

    aa1b4bf9a27e21b5ed07bd968b217ee9745304635d133ec1eaeeb947949236bb

  • SHA512

    3bc570338f104471ada206224a9c4d79b138c4ecba0ac5d6a842e355688907169ab62da097e518bf4f41856f9451b9aed17d072aec6daae761893e1fe3690b7e

  • SSDEEP

    96:vSNdCksNdCk1b0pQiGx8FkRv1VQSV9gP3/RPNiE4Lpz:a6ks6k1b0pQiGx8F+USLgP3/hNiE01

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5c7b5569a9e47cafebb8be4d0357fa89_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5c7b5569a9e47cafebb8be4d0357fa89_JaffaCakes118.exe"
    1⤵
      PID:3568
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3568 -s 296
        2⤵
        • Program crash
        PID:2768
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3568 -s 300
        2⤵
        • Program crash
        PID:2672
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3568 -ip 3568
      1⤵
        PID:5020
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3568 -ip 3568
        1⤵
          PID:1908

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3568-0-0x0000000000400000-0x000000000040A000-memory.dmp

          Filesize

          40KB