Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-05-2024 14:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
638fb49d43c3b2a0836da3b1bedea2a0_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
638fb49d43c3b2a0836da3b1bedea2a0_JaffaCakes118.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
638fb49d43c3b2a0836da3b1bedea2a0_JaffaCakes118.exe
-
Size
684KB
-
MD5
638fb49d43c3b2a0836da3b1bedea2a0
-
SHA1
f0a301bd222deb072f9bc44ce055a0069a78703d
-
SHA256
f3fbc3e5ae7b49cf7d8da1585bb46b2ace776b1341a8ff9490df5facbfe990f5
-
SHA512
6f543aecbb7dfb5be72cb3cc6a59e0db5708703c17a799273a4a6a88569d28793a33b21b96fac0adbdf383b86ef8bd353a3652b7a4da414fc16bd7c6ce772896
-
SSDEEP
12288:j6/NLMIirGyHoFk1lOW45zfMWHohYTrmxDDndVOBKmvM3as:j6VedoFkla5zk00PDjzOU/K
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes:
638fb49d43c3b2a0836da3b1bedea2a0_JaffaCakes118.exepid process 2112 638fb49d43c3b2a0836da3b1bedea2a0_JaffaCakes118.exe 2112 638fb49d43c3b2a0836da3b1bedea2a0_JaffaCakes118.exe -
Suspicious use of SendNotifyMessage 2 IoCs
Processes:
638fb49d43c3b2a0836da3b1bedea2a0_JaffaCakes118.exepid process 2112 638fb49d43c3b2a0836da3b1bedea2a0_JaffaCakes118.exe 2112 638fb49d43c3b2a0836da3b1bedea2a0_JaffaCakes118.exe