Overview
overview
7Static
static
7edf693864b...18.exe
windows7-x64
7edf693864b...18.exe
windows10-2004-x64
7$PLUGINSDI...os.dll
windows7-x64
3$PLUGINSDI...os.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$TEMPImg/C...04.exe
windows7-x64
1$TEMPImg/C...04.exe
windows10-2004-x64
1$TEMPImg/regver.exe
windows7-x64
1$TEMPImg/regver.exe
windows10-2004-x64
1ImageResizerBatch.exe
windows7-x64
7ImageResizerBatch.exe
windows10-2004-x64
7Uninst.exe
windows7-x64
7Uninst.exe
windows10-2004-x64
7$PLUGINSDI...es.dll
windows7-x64
3$PLUGINSDI...es.dll
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11/04/2024, 17:26
Behavioral task
behavioral1
Sample
edf693864be0bedab974fefb090d9a20_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edf693864be0bedab974fefb090d9a20_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ExecDos.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ExecDos.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$TEMPImg/CheckVer104.exe
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
$TEMPImg/CheckVer104.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$TEMPImg/regver.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$TEMPImg/regver.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
ImageResizerBatch.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
ImageResizerBatch.exe
Resource
win10v2004-20240319-en
Behavioral task
behavioral13
Sample
Uninst.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Uninst.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/Processes.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/Processes.dll
Resource
win10v2004-20240226-en
General
-
Target
$TEMPImg/CheckVer104.exe
-
Size
332KB
-
MD5
fa199dffc4991a36725e1a2d272e787e
-
SHA1
68c1db76a8080782e3f450e3f724e4e1564b18f6
-
SHA256
13c8453cb118d3f9d2dc2a1189633ab10162f902758320487f03daf124c4bb9e
-
SHA512
8dc6a2369dc87148ac45cd6ae37f33fcb32c4fd863d17f6166a41c7a4ef40edd6a4da0f57536f382e550add791bf678a5116e0f1cb440649be1b924c3a31a520
-
SSDEEP
6144:QL3Hu9I12R1kFFFFFFFFFFFIZyDayo59Xu7U5byhMkB9MIp+PGUk4F:Mc1kFFFFFFFFFFFIZ6o5RuA5uhMkBaIo
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1000 CheckVer104.exe 1000 CheckVer104.exe