b97ab59bfbe97e2707617bc41baf5b81cb6b43885ec48fd6e37f2479a24b3929 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 02:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

186aaacada932b05ceb54aee35817ec2_JaffaCakes118.exe
Size

256KB
MD5

186aaacada932b05ceb54aee35817ec2
SHA1

4d5461435be9da26b9e5548dbc0fa056a3e00f4e
SHA256

b97ab59bfbe97e2707617bc41baf5b81cb6b43885ec48fd6e37f2479a24b3929
SHA512

2c16e98763001de25ecb2782cde20c64b2b97eafceba17784b14af1ac71d59d0f0f39c42b69478f8e5b4e440f1dbd656632bbfbcb0315a669773d4452da7134c
SSDEEP

6144:YnoQVCT+oworKeMXfpoF+kT5YTGjmHEP:YnDVO5CsNYSmHEP

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1132	186aaacada932b05ceb54aee35817ec2_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\186aaacada932b05ceb54aee35817ec2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\186aaacada932b05ceb54aee35817ec2_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1132-1-0x0000000000300000-0x000000000030D000-memory.dmp

Filesize
52KB

Download
memory/1132-0-0x0000000000300000-0x000000000030D000-memory.dmp

Filesize
52KB

Download
memory/1132-3-0x0000000000400000-0x0000000000443FC8-memory.dmp

Filesize
271KB

Download
memory/1132-2-0x0000000000429000-0x0000000000436000-memory.dmp

Filesize
52KB

Download