0ffe02b66cd3917618e1eae4f172b4da75908cf9664b1fd98c93269030a12189 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/04/2024, 03:29

Sharing

Report Analysis Logs

General

Target

f295937a82e25fcc0193590133305957_JaffaCakes118.exe
Size

285KB
MD5

f295937a82e25fcc0193590133305957
SHA1

9402591c81488c71b5f207e519b0a1d41c6d2da0
SHA256

0ffe02b66cd3917618e1eae4f172b4da75908cf9664b1fd98c93269030a12189
SHA512

9c5545aafe06357c11747d8533063abdeb456318775963314efea3e15cea96a935aaefc154219bcbe779179d93135b916fc0a71a32481152f9a650378780e568
SSDEEP

3072:6BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBI:7

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2952	f295937a82e25fcc0193590133305957_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f295937a82e25fcc0193590133305957_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f295937a82e25fcc0193590133305957_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2952-0-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download
memory/2952-1-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2952-4-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download