6479d615b2d17fefcc1513115897646b56b887600e0055b1b44e23841fcff910

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
24/05/2024, 20:21

Target

6fbb4f0a8ad003459900f7c5b44a9bf5_JaffaCakes118.exe
Size

1.0MB
MD5

6fbb4f0a8ad003459900f7c5b44a9bf5
SHA1

2b3f00e04abd668a183be4ab61603afecf3ba094
SHA256

6479d615b2d17fefcc1513115897646b56b887600e0055b1b44e23841fcff910
SHA512

a493da3dc8f5d55dd8e81912eaa9b2112d92b159e016fd8b7b91d928916853f2cff0f693fbc866e7e544afc06a128077c1cb241c85bc87020bae8417ca74c5b7
SSDEEP

24576:BNRYypfkgqRnuZwtkZtnVYekKRmh2bTrQ:SypT4qZHYyRp/rQ

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2292	6fbb4f0a8ad003459900f7c5b44a9bf5_JaffaCakes118.exe
2292	6fbb4f0a8ad003459900f7c5b44a9bf5_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\6fbb4f0a8ad003459900f7c5b44a9bf5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\6fbb4f0a8ad003459900f7c5b44a9bf5_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2292

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{3F6B5E16-092A-41ED-930B-0B4125D91D4E}
1⤵
PID:2860