Analysis
-
max time kernel
141s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 05:00
Behavioral task
behavioral1
Sample
f05e0f891bf1e37a51102d05d8f74bab_JaffaCakes118.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f05e0f891bf1e37a51102d05d8f74bab_JaffaCakes118.exe
Resource
win10v2004-20240412-en
1 signatures
150 seconds
General
-
Target
f05e0f891bf1e37a51102d05d8f74bab_JaffaCakes118.exe
-
Size
275KB
-
MD5
f05e0f891bf1e37a51102d05d8f74bab
-
SHA1
06f76efba169d833b49f0ad7040144d95494610f
-
SHA256
b029e72027ccb91a57740018e1f090751e7cf9a79f25b0c02866594908a04cbd
-
SHA512
0672e13135494f8d47af82cb24a4d75f06666572144119fbb7b83aa1879d39f861fc3c4b1a77a6ed11c4bac9a7f8dec9701df168fe3a07ce4dafb311e7036299
-
SSDEEP
6144:lXC93mtnYzeSyf+QBe5Eti9cav9ymClxdjR/jg5iIEvby03i4p:dC93ajPk5EtocfjR/joiIET33i4p
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2888-0-0x0000000000400000-0x00000000004BB000-memory.dmp upx behavioral1/memory/2888-2-0x0000000000400000-0x00000000004BB000-memory.dmp upx behavioral1/memory/2888-3-0x0000000000400000-0x00000000004BB000-memory.dmp upx -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2888 f05e0f891bf1e37a51102d05d8f74bab_JaffaCakes118.exe