7bdc4119e9d92f3e52f5953164fc5c2e49dcbec8b7be70b998dcd8b8869999ee

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
27/06/2024, 19:10

Target

17307db61d14151c03c157d652b07a49_JaffaCakes118.exe
Size

200KB
MD5

17307db61d14151c03c157d652b07a49
SHA1

ee51ec25f4ce1fa658ac1300a4ee46cf0db516cd
SHA256

7bdc4119e9d92f3e52f5953164fc5c2e49dcbec8b7be70b998dcd8b8869999ee
SHA512

58deb12141a27b15167ba5572a0f7300780c46fae014b64f10c6d2b31c12613dbd47536cab685ddc9d6685d5039b4198ec64b36355f3284c7f3304be5bc44923
SSDEEP

3072:/VbeiZ4UGK8Bl/0vlu9nRqGXK5cjWXd5zbfGAC+OeHSCN:9qhbhgvgwGXK5cizbGAC+Os

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3012	17307db61d14151c03c157d652b07a49_JaffaCakes118.exe
3012	17307db61d14151c03c157d652b07a49_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\17307db61d14151c03c157d652b07a49_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\17307db61d14151c03c157d652b07a49_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3012

memory/3012-3-0x0000000002210000-0x0000000002211000-memory.dmp

Filesize
4KB

Download
memory/3012-4-0x0000000002A70000-0x0000000002A71000-memory.dmp

Filesize
4KB

Download
memory/3012-6-0x0000000002AC0000-0x0000000002AC1000-memory.dmp

Filesize
4KB

Download
memory/3012-7-0x0000000004170000-0x0000000004171000-memory.dmp

Filesize
4KB

Download
memory/3012-5-0x0000000002A90000-0x0000000002A91000-memory.dmp

Filesize
4KB

Download
memory/3012-8-0x0000000004180000-0x0000000004181000-memory.dmp

Filesize
4KB

Download
memory/3012-10-0x0000000002AA0000-0x0000000002AA1000-memory.dmp

Filesize
4KB

Download
memory/3012-12-0x0000000002220000-0x0000000002221000-memory.dmp

Filesize
4KB

Download
memory/3012-11-0x0000000002A80000-0x0000000002A81000-memory.dmp

Filesize
4KB

Download
memory/3012-9-0x0000000002AD0000-0x0000000002AD1000-memory.dmp

Filesize
4KB

Download