Analysis
-
max time kernel
141s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
12/06/2024, 19:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a200d8e80f1f17445e1857193b6f9f49_JaffaCakes118.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
a200d8e80f1f17445e1857193b6f9f49_JaffaCakes118.exe
Resource
win10v2004-20240611-en
3 signatures
150 seconds
General
-
Target
a200d8e80f1f17445e1857193b6f9f49_JaffaCakes118.exe
-
Size
2.6MB
-
MD5
a200d8e80f1f17445e1857193b6f9f49
-
SHA1
6afc3f6be238562ad448e85ec4e3c653ebf36373
-
SHA256
eab29173992be71010d72ad3c6ff80bc7e64dedc044122e7fb949fd1c816b0af
-
SHA512
e6daaa976b306d100138ffcc460eff5ae400ea527c20671edbc51a727bb86546a889b6d170d109ec89e36b1af220e848087d6bdc106345c8c1e6a9e2c826c35d
-
SSDEEP
24576:GfwwPQKeqDemWNbz7zSExRjm+0JB0S/EDkrZW1SRuU4K6QfHOQ7RDSik0dGEMS1w:G01qXKXL0JOS/NZWZUH7dvB9icc71Q1
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4568 a200d8e80f1f17445e1857193b6f9f49_JaffaCakes118.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4568 a200d8e80f1f17445e1857193b6f9f49_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4568 a200d8e80f1f17445e1857193b6f9f49_JaffaCakes118.exe 4568 a200d8e80f1f17445e1857193b6f9f49_JaffaCakes118.exe