dc2ff6b144f5a96d367607bb6f9b1a24f4c44c10f3671280ca4fc07b58c630db

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
27-05-2024 20:18

Target

7a65bf8a1940fd39a42623bcf284382d_JaffaCakes118.exe
Size

2.8MB
MD5

7a65bf8a1940fd39a42623bcf284382d
SHA1

e1a799be830ec3aad8aaee328e0510d399ed5513
SHA256

dc2ff6b144f5a96d367607bb6f9b1a24f4c44c10f3671280ca4fc07b58c630db
SHA512

47586ff3a8574e2f775fcb925101364ef51a5754a0b3e4ee13cd765df841c4584723edcd15dad4763876d384d67ad7a11625a6e41505af0abe17c785ad717aad
SSDEEP

49152:UKB1QYy2WGmZOBBHt9/r57nxG9ijgQO1PMDozYAPz2U:lpmZKHtxr57nxGRMDoMu2

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

7a65bf8a1940fd39a42623bcf284382d_JaffaCakes118.exe

pid process

1832 7a65bf8a1940fd39a42623bcf284382d_JaffaCakes118.exe

pid	process
1832	7a65bf8a1940fd39a42623bcf284382d_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\7a65bf8a1940fd39a42623bcf284382d_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7a65bf8a1940fd39a42623bcf284382d_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1832