e0275daf7ff815ba396156700a0794adf4c2dc4f218d15c5b0fe3c222c8baf62

Analysis

max time kernel
145s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-04-2024 20:44

Target

ebf381da69d274e5e6707b11ee25358f_JaffaCakes118.exe
Size

141KB
MD5

ebf381da69d274e5e6707b11ee25358f
SHA1

1f2dbe76b43efc89f274012753b975d00aade465
SHA256

e0275daf7ff815ba396156700a0794adf4c2dc4f218d15c5b0fe3c222c8baf62
SHA512

9ed5f97539d65bffa525a505527159d2cfc8d7b50f56327f5d0b06eed8a0551b2aa38dc17458701e76737c8f3ab5b5b7367df63c56253e982112531eb8c84721
SSDEEP

3072:U+MQG3NmzRRFowsJcpuwGAS/0Pu5RCyqY8Xb8Y+o/:7MQaNEDsJcp9S/Nh1Yn

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3192	ebf381da69d274e5e6707b11ee25358f_JaffaCakes118.exe
3192	ebf381da69d274e5e6707b11ee25358f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\ebf381da69d274e5e6707b11ee25358f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ebf381da69d274e5e6707b11ee25358f_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3840 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:8
1⤵
PID:2348

memory/3192-0-0x00000000003E0000-0x0000000000427000-memory.dmp

Filesize
284KB

Download
memory/3192-1-0x00000000003E0000-0x0000000000427000-memory.dmp

Filesize
284KB

Download