Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
04-07-2024 23:55
General
-
Target
26b616b56b5402f7fd843991f0ea5581_JaffaCakes118.exe
-
Size
788KB
-
MD5
26b616b56b5402f7fd843991f0ea5581
-
SHA1
916beebea33cbdcc98ab15e11f1c1f7c5afabd30
-
SHA256
24dcff86822c11debb50ffb7b10f5b5998cf525a22ff0cd34bc7bc3ab98fe5c6
-
SHA512
a9f955f5e7379d166600c9f412a3ee7d0938971397e7a259c2e017c07be2ff444b2ba460f7f634401b93e8fca3959da10ea619279dbd24c89b897a8854dbd8cf
-
SSDEEP
24576:ZBcUkRLcy9vGtfPU+sEHd6sXsJpP4SEtvb9F:ZBPkRLD9vGpPU+996YSpgSajr
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\26b616b56b5402f7fd843991f0ea5581_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\26b616b56b5402f7fd843991f0ea5581_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx