Analysis
-
max time kernel
117s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27-06-2024 22:57
Behavioral task
behavioral1
Sample
17d87fbdf82024c32baf427094d43de0_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
17d87fbdf82024c32baf427094d43de0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
17d87fbdf82024c32baf427094d43de0_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
17d87fbdf82024c32baf427094d43de0
-
SHA1
df7478a0c20289d6386885d79f7051a47152b552
-
SHA256
d4e64b4f6d533232f62af8d7f01158fe86a4e1058a0b0ce03e0e9657cacacf89
-
SHA512
4cb600c741f5e251703f2234f4ed2ea3333e925c284d508f25d1c6ecfed9996835b0d1d2b2fdec5f5a15c493c59e4b00095fc1b961c432a9be06738f1ca7a2dd
-
SSDEEP
12288:EzK3zWz95HS/Uhx7/HVNEeQPNg/Zj/tNG+AO6Okvmcvzf7Y8aairYAC:Em3zWzMUzcefRj/qdZvmKfEre
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/812-0-0x0000000000400000-0x0000000000527000-memory.dmp upx behavioral1/memory/812-2-0x0000000000400000-0x0000000000527000-memory.dmp upx -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 812 17d87fbdf82024c32baf427094d43de0_JaffaCakes118.exe 812 17d87fbdf82024c32baf427094d43de0_JaffaCakes118.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 812 17d87fbdf82024c32baf427094d43de0_JaffaCakes118.exe 812 17d87fbdf82024c32baf427094d43de0_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 812 17d87fbdf82024c32baf427094d43de0_JaffaCakes118.exe 812 17d87fbdf82024c32baf427094d43de0_JaffaCakes118.exe