Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20/06/2024, 15:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
071fbe4f1c5cb37339fcb53958b4ccc4_JaffaCakes118.exe
Resource
win7-20240611-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
071fbe4f1c5cb37339fcb53958b4ccc4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
-
Target
071fbe4f1c5cb37339fcb53958b4ccc4_JaffaCakes118.exe
-
Size
659KB
-
MD5
071fbe4f1c5cb37339fcb53958b4ccc4
-
SHA1
624519737764ad209979af0958cc1571ae6efb0e
-
SHA256
9c57237c9214bea2a1e12aab6b0ebce442e1e649180b8f2397361fd4908fbac2
-
SHA512
145692790ab62a85b55921155dd12d02ae3c5c26929ac594a5883b2002b22c722ca4381916159c8e8f67c2993845029c0885fb72f0cde39a5917cf7a23fbaba1
-
SSDEEP
12288:Wj9a3xztjWg1TwL1NXGGZm3tOQjfkVojM9ebdPdKEvhYKVdyWeTLqvveCND:89iLr1N4mdOQw6bddhvhBTeTmnh5
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2156 071fbe4f1c5cb37339fcb53958b4ccc4_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2156 071fbe4f1c5cb37339fcb53958b4ccc4_JaffaCakes118.exe 2156 071fbe4f1c5cb37339fcb53958b4ccc4_JaffaCakes118.exe