35a9ee1a9a8848ad70d3b48b14a0d6dc2b436491e49c6e11c5542d0da945fae1

Analysis

max time kernel
94s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
16-04-2024 23:17

Target

f48bc28e8cabd2817e2dc28196cc0982_JaffaCakes118.exe
Size

140KB
MD5

f48bc28e8cabd2817e2dc28196cc0982
SHA1

0390fc73a3cd3c65ff99b85b66eb1b459d447e02
SHA256

35a9ee1a9a8848ad70d3b48b14a0d6dc2b436491e49c6e11c5542d0da945fae1
SHA512

22e2674da24f6ab69a40cab7e014b2c018916318509071f449ca7053bcb7055cc1e6c2545f75daf67d160c862870f0ebadbd062e18e9c59ca9805c9577f63950
SSDEEP

3072:gqaojPvdEacTxCFvDn5UAcMA9iYv8Di55coSiyRP8ii/8sck+VmZwgn50cZjHGFL:3bPvdEacTxCFvr5UAcMAEYv8u55coxy2

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5024	f48bc28e8cabd2817e2dc28196cc0982_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f48bc28e8cabd2817e2dc28196cc0982_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f48bc28e8cabd2817e2dc28196cc0982_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5024