c7b50ecd1f3b2c77b78187fbed270dfb9886bf2f59657cbf85d57869e5cdfca0

Analysis

max time kernel
140s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-06-2024 22:32

Target

030cfe1dcd1062c3ad8c6c47cdce0ffc_JaffaCakes118.exe
Size

1.3MB
MD5

030cfe1dcd1062c3ad8c6c47cdce0ffc
SHA1

fa5ff79c8714b7b0f8809916a50eccb2f77caba9
SHA256

c7b50ecd1f3b2c77b78187fbed270dfb9886bf2f59657cbf85d57869e5cdfca0
SHA512

38a2458322ce11a18c8c9de64999f0ccb578ea92a3576bc5313acc7d882667477eb2431b902f6ce6db0c69155d684d26c48230bc798e46ac31b0310eac98d31e
SSDEEP

24576:qkDnwn126Yg6f4MYOT/jGDAqdAQz2kSnJRN7phyJYVKUJ7zbuzj:hnkUKOTjqdACnSJRN7nyJIDSz

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2676	030cfe1dcd1062c3ad8c6c47cdce0ffc_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\030cfe1dcd1062c3ad8c6c47cdce0ffc_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\030cfe1dcd1062c3ad8c6c47cdce0ffc_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2676

C:\Users\Admin\AppData\Local\Temp\ConFig.Dat

Filesize
837B

MD5
20a8645a60329d293332a08ac2a1909e

SHA1
fdf159336bc7ce7579b6e5024596e6d9aaf52825

SHA256
42f103ceb75dcf20f9e39ca3caad9cf4e2e426b058d91802f02722ba822875ca

SHA512
3014e4355472caa1c3a5d4c2d7909d5a851d3f964b6794756c92bf680441d67bb9fc1bff8d5cb3d9d1041d8641e09c4697ba78543d7bad14b2bd4635e1a11484

Download Submit
memory/2676-0-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/2676-141-0x0000000000400000-0x0000000000E5D000-memory.dmp

Filesize
10.4MB

Download
memory/2676-143-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download