Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
11-05-2024 00:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
31ea65aa86a849dea3762e9538790c2b_JaffaCakes118.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
31ea65aa86a849dea3762e9538790c2b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
31ea65aa86a849dea3762e9538790c2b_JaffaCakes118.exe
-
Size
687KB
-
MD5
31ea65aa86a849dea3762e9538790c2b
-
SHA1
ea934a0768b1cf1dfcefb4b0de356b2458978166
-
SHA256
2d06b8450a8e85b724f897cc4997fda99b9c2923cb7b093a394f023fbb646e3a
-
SHA512
4387eef7b1e4d352f25e9d13912a67e112fe093bc6dfe12ea2e50839d31f26e7725cba4bde13036520cf747c7dc32b9a86bdc7b5d957c44fcbb65b75e42843d7
-
SSDEEP
6144:NB9Fk9Su+G/ly0xXz0oNlsOzrRJ3KbNCLbw/zooRT5rTyTOXONmGE/8PaNjBW2NU:NqSu+G/ly0xXzZFM8Lkz1suG2i
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1224 31ea65aa86a849dea3762e9538790c2b_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 1224 31ea65aa86a849dea3762e9538790c2b_JaffaCakes118.exe 1224 31ea65aa86a849dea3762e9538790c2b_JaffaCakes118.exe 1224 31ea65aa86a849dea3762e9538790c2b_JaffaCakes118.exe 1224 31ea65aa86a849dea3762e9538790c2b_JaffaCakes118.exe 1224 31ea65aa86a849dea3762e9538790c2b_JaffaCakes118.exe