b6e84b713c3384f40b9fccbe8c8ae85e6ab94db453412b1975f35ae0541ac278

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
17/04/2024, 02:22

Target

f4d498f5f4f5c70439bd128899e1ac81_JaffaCakes118.exe
Size

608KB
MD5

f4d498f5f4f5c70439bd128899e1ac81
SHA1

849ff7422d0a6cabec84523dc91c405ededf9edd
SHA256

b6e84b713c3384f40b9fccbe8c8ae85e6ab94db453412b1975f35ae0541ac278
SHA512

570228b1a38b3eb0577f868df590ec58cdc015c46201b28d5661ec520f14ebeef9860991c53cc662902d72f14a15e3c8ee955e3d047fbc9cf182bf17c58db904
SSDEEP

12288:tc0QbBfIl50Ix7BE2G4c/VbLaoXUJPoAUYAoSBDZs:HR72rDRLaoXoXUYyBFs

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1248	f4d498f5f4f5c70439bd128899e1ac81_JaffaCakes118.exe
1248	f4d498f5f4f5c70439bd128899e1ac81_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f4d498f5f4f5c70439bd128899e1ac81_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f4d498f5f4f5c70439bd128899e1ac81_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1248