Analysis
- max time kernel
140s - max time network
52s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 00:27
Behavioral task
behavioral1
Sample
a323aa736968d9408a72decaa8402736_JaffaCakes118.exe
Resource
win7-20231129-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
a323aa736968d9408a72decaa8402736_JaffaCakes118.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
- Target a323aa736968d9408a72decaa8402736_JaffaCakes118.exe
- Size 1.1MB
- Sample240613-arydfaxarf
- SHA256 3c791bc918e2dd9a3447975993c9714d3d1b7332d9cfa00731aeac87b09cdb81
- MD5 a323aa736968d9408a72decaa8402736
- SHA1 d409d7618cd4fcef77a539e1ef545b964d1b1511
- SHA512 ed444807b2e5a6b6d1512539afe3276e1ed7d74d1d470eba3d7db3ba3d29766d264e329aab6d796912397442ad4ea8ee375562f54dee687fe32a418ee5d19066
- SSDEEP 24576:pw7dDrqq2jPwXnv78fADOOejcNOQODAfiFsM6ssBm6RWXdAsJARfiOe:pIDrqq2jPav7wADOvjcNOQ8MOs7sso3z
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2624-0-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral2/memory/2624-1-0x0000000000400000-0x0000000000423000-memory.dmp upx - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2624 a323aa736968d9408a72decaa8402736_JaffaCakes118.exe 2624 a323aa736968d9408a72decaa8402736_JaffaCakes118.exe