1a9af0ca6f9394e6d496686123b1fdc8de3b81fa15a4ed8b27e04f81ca523cd6

Analysis

max time kernel
140s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
24-06-2024 11:54

Target

085b8aa54ca1ddbc71c37185883d249d_JaffaCakes118.exe
Size

28KB
MD5

085b8aa54ca1ddbc71c37185883d249d
SHA1

06a33ff939676ca22535dd2a70e818fccf3c2faa
SHA256

1a9af0ca6f9394e6d496686123b1fdc8de3b81fa15a4ed8b27e04f81ca523cd6
SHA512

a13019ca942ec86590d84d62575b4566cb3798bd966ece75dcb14ea4b97e4906141c4b4cb30cca6a522e92fc1751c1d01fab4eeecb2706ad9305e3300e77456c
SSDEEP

384:ShfJx7rDp5uO3SvepHgscv6M7J8hd2D1hxHXjmDo4P79iURxYoscXIWm:ShBx7rD6OCvepHgtuhd2FHzEz9iWBBP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
380	085b8aa54ca1ddbc71c37185883d249d_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\085b8aa54ca1ddbc71c37185883d249d_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\085b8aa54ca1ddbc71c37185883d249d_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3804 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:8
1⤵
PID:4588

memory/380-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/380-3-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download