Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/05/2024, 21:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
311ba041d7b3b3fe4a28695c9c2ade00_JaffaCakes118.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
311ba041d7b3b3fe4a28695c9c2ade00_JaffaCakes118.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
311ba041d7b3b3fe4a28695c9c2ade00_JaffaCakes118.exe
-
Size
1.0MB
-
MD5
311ba041d7b3b3fe4a28695c9c2ade00
-
SHA1
8c7e9c7afd9f3aaedcc3864a458222b36eb44d27
-
SHA256
256862f608017eaa14c1613397377610ee6565813e301e74f146b96d9b7786d1
-
SHA512
9d0d4eb3d46a0a7a59f64350053a9ff2756be952c90ada372bf14f6ae18dc62d362e9c87988e0f9a1d99ab367fd04a2001e4b611c99d4fa580086b0d8fc4da53
-
SSDEEP
12288:mKwEvhSoroW4Wi+thp/MNLMRxLRg0qVatIF:DTvxLRg0qcIF
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1412 311ba041d7b3b3fe4a28695c9c2ade00_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 1412 311ba041d7b3b3fe4a28695c9c2ade00_JaffaCakes118.exe 1412 311ba041d7b3b3fe4a28695c9c2ade00_JaffaCakes118.exe 1412 311ba041d7b3b3fe4a28695c9c2ade00_JaffaCakes118.exe 1412 311ba041d7b3b3fe4a28695c9c2ade00_JaffaCakes118.exe 1412 311ba041d7b3b3fe4a28695c9c2ade00_JaffaCakes118.exe