Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/05/2024, 02:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
778fec0712347115260d8719fafb9df9_JaffaCakes118.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
778fec0712347115260d8719fafb9df9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
778fec0712347115260d8719fafb9df9_JaffaCakes118.exe
-
Size
687KB
-
MD5
778fec0712347115260d8719fafb9df9
-
SHA1
c4a44f42b222fd98f1b3df93f4654ae4d1e41062
-
SHA256
402cb2907bc4bc976321d4423a9ee2fb1dba0c4ac91745d93ad0df6626f1d7ee
-
SHA512
3a50bbc18295b7e188dda09199666143a855e68d68f9a50ca5046a963a2f994841c7cd28f3c227ecad710cd118a12516b5a401eebf8386bdb7e64596f849daca
-
SSDEEP
6144:NB9Fk9Su+G/ly0xXz0oNlsOzrRJ3KbNCLbw/zooRT5rTyTOXONmGE/8PaNjBW2NG:NqSu+G/ly0xXzZFM8Lkz1suG20
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1096 778fec0712347115260d8719fafb9df9_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 1096 778fec0712347115260d8719fafb9df9_JaffaCakes118.exe 1096 778fec0712347115260d8719fafb9df9_JaffaCakes118.exe 1096 778fec0712347115260d8719fafb9df9_JaffaCakes118.exe 1096 778fec0712347115260d8719fafb9df9_JaffaCakes118.exe 1096 778fec0712347115260d8719fafb9df9_JaffaCakes118.exe