Analysis

  • max time kernel
    138s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/07/2024, 08:05

General

  • Target

    66c46e4f5991297d00f4c5b59cef5b3c_JaffaCakes118.exe

  • Size

    447KB

  • MD5

    66c46e4f5991297d00f4c5b59cef5b3c

  • SHA1

    0c7eb91b3cfd9d8a2102996cfb9e7eab1b77519a

  • SHA256

    728e7a874b41bb5eaa92ba5784c438fe6fefa1808c9868ea915805b315e4bf94

  • SHA512

    dee11319e22c87f53cd178b0fbad7e22a74edf65984a1b12b47c6edead2084002fd9ef56b3ce5bea788c7a05b55070ac993d2174f66c1f83e3816da09fe63575

  • SSDEEP

    12288:43ZfQI4KR9eBj1qYj14DQFu/U3buRKlemZ9DnGAeoejyc6qj8tB6bIDk:WmI9eBhqKejB6U86bw

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\66c46e4f5991297d00f4c5b59cef5b3c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\66c46e4f5991297d00f4c5b59cef5b3c_JaffaCakes118.exe"
    1⤵
      PID:4476
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4476 -s 488
        2⤵
        • Program crash
        PID:3840
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4476 -ip 4476
      1⤵
        PID:2724

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4476-0-0x0000000000400000-0x0000000000476000-memory.dmp

              Filesize

              472KB