Analysis
- max time kernel
148s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 00:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a30cf2768a5556bff7ea15650244bc92_JaffaCakes118.exe
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a30cf2768a5556bff7ea15650244bc92_JaffaCakes118.exe
Resource
win10v2004-20240611-en
2 signatures
150 seconds
General
- Target a30cf2768a5556bff7ea15650244bc92_JaffaCakes118.exe
- Size 296KB
- Sample240613-aayb4szdpr
- SHA256 6bcec5aaccc77ef397216f56d2a5b822830badacc6114dbf8c9980842e5c3c08
- MD5 a30cf2768a5556bff7ea15650244bc92
- SHA1 4e388b70280f30afa8c27ba1b1340af9bfa2013f
- SHA512 7f748a13c8691937fff6cf8b843e5d7be2d4412938890e8d56e8031266e3f8444d410937454077c192658c252005272a2a138a824bd684e9843c254685054c5c
- SSDEEP 6144:aYAvFV4dCmXLSzy9aCbQjM1ownutMlPZg0/xwHrCuVnO:hAvFV4omX+zy97QoozSlPG0/xwHD
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\PELTD a30cf2768a5556bff7ea15650244bc92_JaffaCakes118.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\PELTD\715F6AD24FC16A24BE0599572A6BBB49 = 0000000000000000000000000000000017f8f900f20017f8f900f200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 a30cf2768a5556bff7ea15650244bc92_JaffaCakes118.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4920 a30cf2768a5556bff7ea15650244bc92_JaffaCakes118.exe 4920 a30cf2768a5556bff7ea15650244bc92_JaffaCakes118.exe 4920 a30cf2768a5556bff7ea15650244bc92_JaffaCakes118.exe