3c0cbe1805d9889174559d8e04ae5f908f20d9c0db257529850484fd3d31f135

Analysis

max time kernel
143s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
27/05/2024, 03:57

Target

77d563a35c019337268b6f7a43ca8779_JaffaCakes118.exe
Size

516KB
MD5

77d563a35c019337268b6f7a43ca8779
SHA1

f1c553ac6cdb70321515784a167b8435faee7cc0
SHA256

3c0cbe1805d9889174559d8e04ae5f908f20d9c0db257529850484fd3d31f135
SHA512

d990ba87c2e1e3c5e9f26bddf94c63a4189123717e5af8e188b61a6fd0dce945f43bf9c84960f8213f3d6ed88d1f041c72fc6eb24107b8d298065caedfbaa151
SSDEEP

6144:tLi/DlQ/LrBxKYXg6Zmmn3eqARBJiHFVzdDGGGGGGGGGGGGGGGGGGGGGGGGGGGGm:toDK//Bx26Zt3eVBwHHdN8tJ

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1260	77d563a35c019337268b6f7a43ca8779_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\77d563a35c019337268b6f7a43ca8779_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\77d563a35c019337268b6f7a43ca8779_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4264 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:8
1⤵
PID:628