Overview

overview

3

Static

static

3

5f2810142f...18.exe

windows7-x64

1

5f2810142f...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    129s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-07-2024 05:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5f2810142f3733291fcd43193abb5c46_JaffaCakes118.exe

  • Size

    44KB

  • MD5

    5f2810142f3733291fcd43193abb5c46

  • SHA1

    ff9f8861c46482c55433356262ebdb7c14c748df

  • SHA256

    d565c9148cabf00dbf1a7385d7d33a1f8a6acb3583a863c2e942714cdf44efb9

  • SHA512

    e28a442ac8f38e20de71ff861a1ad2f1fbebe2e1a655e11e9cd08c9260deb4874b35bbefaf05967322c7b99d2e40092a1cff3732aa5156996c0dc22286547096

  • SSDEEP

    192:FJhEi5MZUlds64nHIQ6dz3jJy436f3MRAvDg7T6E6ZA3RjS185YyIfOBTFFMprhQ:FJhP5Mas6IXQvKfcRODg7TGA4fOBJB

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5f2810142f3733291fcd43193abb5c46_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5f2810142f3733291fcd43193abb5c46_JaffaCakes118.exe"
    1⤵
      PID:3432
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3432 -s 408
        2⤵
        • Program crash
        PID:3020
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3432 -ip 3432
      1⤵
        PID:4252

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3432-0-0x0000000000400000-0x000000000040A000-memory.dmp

        Filesize

        40KB

        Download

      • memory/3432-1-0x0000000000400000-0x000000000040A000-memory.dmp

        Filesize

        40KB

        Download