Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
17-06-2024 05:29
Static task
static1
Behavioral task
behavioral1
Sample
b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118.exe
Resource
win7-20240220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118.exe
-
Size
464KB
-
MD5
b6fb2f4bce2204abc78bc5b1025bbb1d
-
SHA1
b61a07a9dab97bb38c3abd1577a9fc6794261ffc
-
SHA256
9e52dce2e52867565df1f0c3294629f32830b4c9dfb663471ff613695a011a83
-
SHA512
3cc5dbf17c80ccda245b864127676e7ec270efad9a86d2e184a9f00e7c201fc05df5b1c0b423538533c9588ddb10cbe837eb2a64038ede5c918b6d5545eafa03
-
SSDEEP
12288:2UAOTRYAOFvJ8y1en4KGs5OV8Um4VKtzy8mIhRBP/4f+m:lRBy1e4KG0V4VKtzy8mI5Pgf3
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 1028 b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118.exe 1028 b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118.exe 1028 b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118.exe -
Suspicious use of SendNotifyMessage 3 IoCs
pid Process 1028 b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118.exe 1028 b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118.exe 1028 b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118.exe