3e9bef77bda34a476c403da5c9b6dad054808aaa0a3d73f67a7041a4d63ef60b

Analysis

max time kernel
144s
max time network
118s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
28/04/2024, 02:58

Target

043979e303547c7d64e05800580756c0_JaffaCakes118.exe
Size

473KB
MD5

043979e303547c7d64e05800580756c0
SHA1

abc0d17a520b864a6c19c7cc56a8b35c903095e2
SHA256

3e9bef77bda34a476c403da5c9b6dad054808aaa0a3d73f67a7041a4d63ef60b
SHA512

04c58ec07951e05b55ad1f81dc3ae6f8bcdebd5bbac2d664d500d7a56e1552f28e98ecc18129da2a78fa1d31f5ec24f1ba916460e2c5544a83d54107dc6fb41d
SSDEEP

6144:t/iQb+ckQsH8TDRGKJkSvGUlYG2dtX+t4Y8EXVE6tAzwzkxlzi+0SETR84lbb6:0Qnk3GDYKGcblwtX+t4Y8jzBxwlC4li

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2052	043979e303547c7d64e05800580756c0_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\043979e303547c7d64e05800580756c0_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\043979e303547c7d64e05800580756c0_JaffaCakes118.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2052