Analysis
-
max time kernel
95s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 15:49
Static task
static1
Behavioral task
behavioral1
Sample
ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
ea58ed6bd23b842d9f21abb97cf65ad1
-
SHA1
cc6e6649cbdb3a548ceb4e7ec61fe2079453c8b0
-
SHA256
e7041871f370f43c5160442dd63f5a74ea7a324801821f6fe2b928be0d389e3f
-
SHA512
cf42142a60a62e5747878262d343cc46be81dd19313428ab01411099de33e081c5983c5d6339344570c01d2872a40061f956842b3e24e2d6e0363b3c087501c6
-
SSDEEP
24576:xvTdadj8CLRsFiuJ2q5Qb8wDNQsUReWOM+YVVGLuAoS:xvTAdLROiuYfDNQDeWOMnsP
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 3168 ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 3168 ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe 3168 ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe 3168 ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe 3168 ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe 3168 ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
MD51081d7eb7a17faedfa588b93fc85365e
SHA1884e264fa37bfb9e71d24f3f5c7554fdf94a8b9f
SHA2560351d055cf1e194302ab125cc93208a8c733efb45dc301ca6e7e2a4051f411e0
SHA5121ff9e7c495b9e005c8d3b56219794c31d804fe1944429e3d4fe013fd8fcb3f51c02b588748c7d9d869fdb115851932e8db4e6792aecd9c83f28237702582ba81