Analysis
-
max time kernel
140s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
13/06/2024, 21:59
Static task
static1
Behavioral task
behavioral1
Sample
a6c6284625c257404088de12ce1c6eff_JaffaCakes118.exe
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a6c6284625c257404088de12ce1c6eff_JaffaCakes118.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
-
Target
a6c6284625c257404088de12ce1c6eff_JaffaCakes118.exe
-
Size
479KB
-
MD5
a6c6284625c257404088de12ce1c6eff
-
SHA1
44a54bafafe28fb1cc9b97b136840eb978acd7b0
-
SHA256
c94e3a1369cf4913b24f978b2184807765365955c5b17c1fe47cef68a53ee0e9
-
SHA512
d68c212fd24d21b88af93481e096a5e178136b2bcdcb5bda6fbb813d7517f721b6eecfd1d7e419881013ed454a03f75e9c8600bd166afec9d10f8402f7ec47ed
-
SSDEEP
12288:SEuzArh5Z9Mf0J+ksqIeGL6vwFtFhHbZ/oLir:rrh5Z9MMAk+L6etFxNQLe
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 2120 a6c6284625c257404088de12ce1c6eff_JaffaCakes118.exe 2120 a6c6284625c257404088de12ce1c6eff_JaffaCakes118.exe 2120 a6c6284625c257404088de12ce1c6eff_JaffaCakes118.exe -
Suspicious use of SendNotifyMessage 3 IoCs
pid Process 2120 a6c6284625c257404088de12ce1c6eff_JaffaCakes118.exe 2120 a6c6284625c257404088de12ce1c6eff_JaffaCakes118.exe 2120 a6c6284625c257404088de12ce1c6eff_JaffaCakes118.exe