Analysis
- max time kernel
141s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
12/06/2024, 23:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a2e63b89a80b19f7356e526e5849bcea_JaffaCakes118.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
a2e63b89a80b19f7356e526e5849bcea_JaffaCakes118.exe
Resource
win10v2004-20240611-en
3 signatures
150 seconds
General
- Target a2e63b89a80b19f7356e526e5849bcea_JaffaCakes118.exe
- Size 2.8MB
- Sample240612-3a2zhsvcqe
- SHA256 e5daf7cbf0f68c59735b97fa899e31fc4127960edd81b37b3249fde794042e56
- MD5 a2e63b89a80b19f7356e526e5849bcea
- SHA1 6b5d1ef6b14cf6a9c3fcfcf20426bc57778a9968
- SHA512 e68681e5ba4c2041973128ddbc39ba8f6b192c19d8d09d5b3d89ecdd12a0ae76412996d14935ceda1ee8fbcae5be1187a9fb97c987083236762996d8bea31b93
- SSDEEP 49152:NaXFXLBQF2MRmSr8fTMilXAhZQmyM4st:NaVXt5iilXAo3M4st
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2892 a2e63b89a80b19f7356e526e5849bcea_JaffaCakes118.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2892 a2e63b89a80b19f7356e526e5849bcea_JaffaCakes118.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2892 a2e63b89a80b19f7356e526e5849bcea_JaffaCakes118.exe 2892 a2e63b89a80b19f7356e526e5849bcea_JaffaCakes118.exe