b8bb42367fb9724bb640f998e463d0b7c725de3d8d4f128e391a9c933739e3d0

Analysis

max time kernel
140s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19/04/2024, 20:58

Target

fb276fd74825188ef0215d947dee9921_JaffaCakes118.exe
Size

716KB
MD5

fb276fd74825188ef0215d947dee9921
SHA1

a96edfaf4c101f36a111dd24fea4b01171047811
SHA256

b8bb42367fb9724bb640f998e463d0b7c725de3d8d4f128e391a9c933739e3d0
SHA512

bfc08edb6e2b996e9ebdbc9400fb1de14b04923344180cdb482a964da91eb81fc86e9b890c17bab528f4ead545eaf55248e4d85e7f31826169d5303687db3b7a
SSDEEP

12288:rT+RGMPZknBN82+qX6VWW5i20MT2tmOx6/:rT7/83qlij0Xthxo

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2960	fb276fd74825188ef0215d947dee9921_JaffaCakes118.exe
2960	fb276fd74825188ef0215d947dee9921_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\fb276fd74825188ef0215d947dee9921_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fb276fd74825188ef0215d947dee9921_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2960

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2228 --field-trial-handle=2280,i,716736634476467098,11449718822158202904,262144 --variations-seed-version /prefetch:8
1⤵
PID:4904