Analysis
-
max time kernel
144s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
15-05-2024 01:39
Behavioral task
behavioral1
Sample
44045058ad0b664510e3057cff66da25_JaffaCakes118.exe
Resource
win7-20240220-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
44045058ad0b664510e3057cff66da25_JaffaCakes118.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
44045058ad0b664510e3057cff66da25_JaffaCakes118.exe
-
Size
1.3MB
-
MD5
44045058ad0b664510e3057cff66da25
-
SHA1
65d2ad7365859e6e3a14a45e5c674a6616fc2e97
-
SHA256
16d4772424eeb8667df91341b73e1280bbf86b9bbef3e95b6bb13602e0762442
-
SHA512
9415023af1dbaaae4b0b13b9940f054c97f85bd47bb918d9b8801a272bd1a86b5687b2838a8cce253188368bdd35d37f6dade3a834346a769a820c7bd625ec38
-
SSDEEP
24576:uivxRhs4KqZ/20RvyiGkfqk9l8ZhNladZd9Oe9mMfJ93FXJkwv:u41Z/2KCkfqkj8Zh7KZdXmMfzZ
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1732-0-0x0000000000400000-0x000000000072E000-memory.dmp upx behavioral1/memory/1732-3-0x0000000000400000-0x000000000072E000-memory.dmp upx behavioral1/memory/1732-4-0x0000000000400000-0x000000000072E000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1732 44045058ad0b664510e3057cff66da25_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1732 44045058ad0b664510e3057cff66da25_JaffaCakes118.exe