4a267ff8a165f16aa287dc9ed2643b558b8578252c52fb6aaa198bb907751158

Analysis

max time kernel
114s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14-05-2024 12:53

Target

4190670a189b03fa8d4a61d50ac5be80_JaffaCakes118.exe
Size

280KB
MD5

4190670a189b03fa8d4a61d50ac5be80
SHA1

739b72f3b5d83114fca289918e901562c68239ed
SHA256

4a267ff8a165f16aa287dc9ed2643b558b8578252c52fb6aaa198bb907751158
SHA512

87c74725af6c55511cff83cf3886785786c37223cf5fe0323311a26d011535e8188bf3dd0f1ac5c352cc74b15fe77cb0fa67a9cf683c67da673ab938b879f3ec
SSDEEP

6144:7y9n70iH6yfi3hRgmDRgHRW456Oex1Vu5:7y9SyfEDRgH845M3q

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

4190670a189b03fa8d4a61d50ac5be80_JaffaCakes118.exe

pid process

2296 4190670a189b03fa8d4a61d50ac5be80_JaffaCakes118.exe

pid	process
2296	4190670a189b03fa8d4a61d50ac5be80_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\4190670a189b03fa8d4a61d50ac5be80_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4190670a189b03fa8d4a61d50ac5be80_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2296

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2268 --field-trial-handle=2244,i,11878111470816612087,2265290141962607370,262144 --variations-seed-version /prefetch:8
1⤵
PID:1852