Analysis
-
max time kernel
142s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
20-06-2024 11:49
General
-
Target
05b723a8eac7e62d98f428a254694d0a_JaffaCakes118.exe
-
Size
188KB
-
MD5
05b723a8eac7e62d98f428a254694d0a
-
SHA1
41f6768ec2e5f1b3dbd957db55d34642f896c730
-
SHA256
d52546b655b6dab8a6de6ab8a977f22344a45f11ff6a3a43860653938c3f1edc
-
SHA512
95d5498e2f0530f3706e9bb2cb2cf37581489d0fc1b41c2913019de446567280e81c7b4fc57df2ddf8b71c4d5b9a4b6e6d5c9e707fc5d420b354f3bdab94ef75
-
SSDEEP
3072:trSqpKloQSrkKgRENEI5apGTwQqVMTW0hiJsUW4iec1X3U:PNX
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\05b723a8eac7e62d98f428a254694d0a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\05b723a8eac7e62d98f428a254694d0a_JaffaCakes118.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory