281a5af5a23e68e9cdc83b6a7b4d69387dc3fa4eba9816fa404a4390d6496b00

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
27/06/2024, 16:43

Target

16bb9b12b4ba09a23225920bd9dac20c_JaffaCakes118.exe
Size

220KB
MD5

16bb9b12b4ba09a23225920bd9dac20c
SHA1

c2affc118d38ad9b14cf6a7e25df7d7f2bf0717b
SHA256

281a5af5a23e68e9cdc83b6a7b4d69387dc3fa4eba9816fa404a4390d6496b00
SHA512

13947d7db47ca7d49fcd1425981dd3ec6186217d3f52ffa18579b8a95b9dcc44812cce1a8541662abce4e9408f69c83ae60dee167c79eeb24e4a7d023a5a6721
SSDEEP

3072:MFamwfbhyLHnxDFqoxNpi+NN1du21X/DPyIB0llmNcppmhz9jCFQlqgWCYQTM0cz:M1WloxHduI/pByCcpQhJCFQlFW9QNcU

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2192	16bb9b12b4ba09a23225920bd9dac20c_JaffaCakes118.exe
2192	16bb9b12b4ba09a23225920bd9dac20c_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\16bb9b12b4ba09a23225920bd9dac20c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\16bb9b12b4ba09a23225920bd9dac20c_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2192